Skip to content
OpenAdvisories

Archive

24 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /24 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High —
    CVE-2021-33563

    Improper rate limiting in Koel

    Koel before 5.1.4 lacks login throttling, lacks a password strength policy, and shows whether a failed login attempt had a valid username. This might make brute-force attacks easier.

    phanan/koel Packagist
  • High 7.0
    CVE-2020-13600

    Malformed SPI in response for eswifi can corrupt kernel memory

    Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions >= 1.14.2, >= 2.3.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr

    zephyrproject-rtos Zephyr
  • High 8.3
    CVE-2020-10064

    Improper Input Frame Validation in ieee802154 Processing

    Improper Input Frame Validation in ieee802154 Processing. Zephyr versions >= v1.14.2, >= v2.2.0 contain Stack-based Buffer Overflow (CWE-121), Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/securit…

    zephyrproject-rtos Zephyr
  • High 8.8
    CVE-2021-29256 Exploited

    . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information …

    KEV Jul 7, 2023
  • High 7.5
    CVE-2021-32624

    Private Field data leak

    Keystone 5 is an open source CMS platform to build Node.js applications. This security advisory relates to a newly discovered capability in our query infrastructure to directly or indirectly expose the values of private fields, bypassing the configured access…

    keystonejs keystone-5 @keystonejs/keystone npm
  • High 7.5
    CVE-2021-33502

    ReDoS in normalize-url

    The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for Node.js has a ReDoS (regular expression denial of service) issue because it has exponential performance for data: URLs.

    nodejs-nodemon node-yarnpkg node-got node-got Debian Ubuntu Azure Linux npm
  • High 7.2
    CVE-2021-32629

    Memory access due to code generation flaw in Cranelift module

    Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable machine code. There is a bug in 0.73 of the Cranelift x64 backend that can create a scenario that could …

    bytecodealliance wasmtime cranelift-codegen wasmtime PyPI crates.io
  • High 7.2
    CVE-2021-20557

    IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system by s…

    IBM Security Guardium
  • High 7.6
    CVE-2020-4990

    IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statement…

    IBM Security Guardium
  • High 8.4
    CVE-2021-20385

    IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By …

    IBM Security Guardium
  • High 7.8
    CVE-2021-20722

    Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Do…

    FUJITSU LIMITED and PFU The installers of ScanSnap Manager and the Software Download Installer