Skip to content
OpenAdvisories

Archive

21 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /21 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

50 results · Feed

  • Medium 6.8
    CVE-2021-32633

    Remote Code Execution via traversal in TAL expressions

    Zope is an open-source web application server. In Zope versions prior to 4.6 and 5.2, users can access untrusted modules indirectly through Python modules that are available for direct use. By default, only users with the Manager role can add or edit Zope Pag…

    zopefoundation Zope zope PyPI
  • Unscored —
    CVE-2020-27211

    Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against physical side channels. The f…

  • Unscored —
    CVE-2020-27212

    STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection (RDP…

  • Unscored —
    CVE-2021-29414

    STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control.

  • Unscored —
    CVE-2021-29415

    The elliptic curve cryptography (ECC) hardware accelerator, part of the ARM® TrustZone® CryptoCell 310, contained in th…

  • Unscored —
    CVE-2020-27208

    The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4…

  • Unscored —
    CVE-2020-12061

    An issue was discovered in Nitrokey FIDO U2F firmware through 1.1. Communication between the microcontroller and the se…

  • Unscored —
    CVE-2021-32032

    In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation (in the …

  • High 8.8
    CVE-2021-28798

    Relative Path Traversal Vulnerability in QTS and QuTS hero

    A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to modify files that impact system integrity. QNAP have already fixed this vulnerability in the following…

    QNAP Systems QTS QuTS hero
  • High 8.8
    CVE-2021-31439

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology Di…

    Synology DiskStation Manager netatalk netatalk Debian Ubuntu Alpine