Skip to content
OpenAdvisories

Archive

21 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /21 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.8
    CVE-2021-33514

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/l…

  • High 7.5
    CVE-2021-33511

    Server-Side Request Forgery in Plone

    Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors in plone.app.theming, plone.app.dexterity, and plone.supermodel.

    plone PyPI
  • High 8.8
    CVE-2021-21549

    Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged…

    Dell XtremIO
  • High 7.5
    CVE-2021-33500

    PuTTY before 0.75 on Windows allows remote servers to cause a denial of service (Windows GUI hang) by telling the PuTTY…

    putty Ubuntu
  • High 7.2
    CVE-2021-32634

    Deserialization of Untrusted Data in Emissary

    Emissary is a distributed, peer-to-peer, data-driven workflow framework. Emissary 6.4.0 is vulnerable to Unsafe Deserialization of post-authenticated requests to the [`WorkSpaceClientEnqueue.action`](https://github.com/NationalSecurityAgency/emissary/blob/30c…

    NationalSecurityAgency emissary
  • High 7.5
    GHSA-gwj5-3vfq-q992

    Import loops in account imports, nats-server DoS

    (This advisory is canonically <https://advisories.nats.io/CVE/CVE-2020-28466.txt>) ## Problem Description An export/import cycle between accounts could crash the nats-server, after consuming CPU and memory. This issue was fixed publicly in <https://github.com…

    github.com/nats-io/nats-server/v2 github.com/nats-io/nats-server Go
  • High 8.8
    CVE-2021-31475

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job …

    SolarWinds Orion Job Scheduler
  • High 7.8
    CVE-2021-31473

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.3…

    Foxit Reader
  • High 8.8
    CVE-2021-31440 Public exploit

    This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An …

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2021-28798

    Relative Path Traversal Vulnerability in QTS and QuTS hero

    A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to modify files that impact system integrity. QNAP have already fixed this vulnerability in the following…

    QNAP Systems QTS QuTS hero
  • High 8.8
    CVE-2021-31439

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology Di…

    Synology DiskStation Manager netatalk netatalk Debian Ubuntu Alpine