Skip to content
OpenAdvisories

Archive

25 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /25 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-33575

    Remote code execution in ruby-jss

    The Pixar ruby-jss gem before 1.6.0 allows remote attackers to execute arbitrary code because of the Plist gem's documented behavior of using Marshal.load during XML document processing.

    ruby-jss RubyGems
  • Critical 9.8
    CVE-2021-25946

    Prototype pollution in nconf-toml

    Prototype pollution vulnerability in `nconf-toml` versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution.

    nconf-toml npm
  • Critical 9.8
    CVE-2021-25944

    deep-defaults vulnerable to prototype pollution

    Prototype pollution vulnerability in 'deep-defaults' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution.

    deep-defaults npm
  • Critical 9.1
    CVE-2021-21658

    XML external entity vulnerability in Jenkins Nuget Plugin

    Jenkins Nuget Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

    Jenkins Project Jenkins Nuget Plugin org.jenkins-ci.plugins:nuget Web / CMS Maven