Skip to content
OpenAdvisories

Archive

26 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /26 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.4
    CVE-2021-25217

    A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient

    In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are beyond their End-of-Life (EOL) and no longer supported by ISC. From inspection it is …

    ISC ISC DHCP isc-dhcp isc-dhcp Debian Ubuntu Azure Linux Alpine
  • High —
    GHSA-rrqv-vjrw-hrcr

    Arbitrary Code Execution in json-ptr

    There is a security vulnerability in `json-ptr` versions prior to v2.1.0 in which an unscrupulous actor may execute arbitrary code. If your code sends un-sanitized user input to json-ptr's .get() method, your project is vulnerable to this injection-style vuln…

    json-ptr npm
  • High 8.0
    CVE-2021-20487

    IBM Power9 Self Boot Engine(SBE) could allow a privileged user to inject malicious code and compromise the integrity of…

    IBM Power 9 Systems
  • High 7.4
    CVE-2019-4588

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local u…

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • High 7.5
    CVE-2021-33194

    golang.org/x/net/html Infinite Loop vulnerability

    golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.

    k3d k3d-proxy k3d-tools lxd Debian Ubuntu Wolfi Go
  • High 7.5
    CVE-2021-33038

    Exposure of sensitive information to an unauthorized actor in HyperKitty

    An issue was discovered in management/commands/hyperkitty_import.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be …

    hyperkitty hyperkitty hyperkitty Debian Ubuntu PyPI
  • High 8.7
    CVE-2021-22543

    Improper memory handling in Linux KVM

    An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to …

    Linux kernel Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu