Skip to content
OpenAdvisories

Archive

14 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /14 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

170 results · Feed

  • Unscored —
    CVE-2021-24193

    Visitor Traffic Real Time Statistics < 2.12 - Arbitrary Plugin Installation/Activation via Low Privilege User

    Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Visitor Traffic Real Time Statistics WordPress plugin before 2.12, to install any plugin (including a specific version) from the WordPress repository, as well as act…

    wp-buy Visitor Traffic Real Time Statistics Web / CMS
  • Unscored —
    CVE-2021-24188

    WP Content Copy Protection & No Right Click < 3.1.5 - Arbitrary Plugin Installation/Activation via Low Privilege User

    Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Content Copy Protection & No Right Click WordPress plugin before 3.1.5, to install any plugin (including a specific version) from the WordPress repository, as wel…

    wp-buy WP Content Copy Protection & No Right Click Web / CMS
  • Unscored —
    CVE-2020-27150

    In multiple versions of NPort IA5000A Series, the result of exporting a device’s configuration contains the passwords o…

  • Unscored —
    CVE-2020-27149

    By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege lev…

  • Unscored —
    CVE-2020-27020

    Password generator feature in Kaspersky Password Manager was not completely cryptographically strong and potentially al…

    Windows Android iOS
  • Unscored —
    CVE-2021-30183

    Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when runn…

  • Unscored —
    CVE-2021-31922

    An HTTP Request Smuggling vulnerability in Pulse Secure Virtual Traffic Manager before 21.1 could allow an attacker to …

  • Unscored —
    CVE-2021-32051

    Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL injection via the GiPWorkflow/Service/DownloadPublicFile id pa…

  • Unscored —
    CVE-2020-27769

    In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCo…

    imagemagick imagemagick Debian Ubuntu
  • High 8.0
    CVE-2021-32819 Public exploit Scanner template EPSS 58%

    Remote code execution in squirrelly

    Squirrelly is a template engine implemented in JavaScript that works out of the box with ExpressJS. Squirrelly mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options remote code…

    squirrellyjs squirrelly squirrelly npm