Skip to content
OpenAdvisories

Archive

May 2021

Vulnerabilities first published in this month (UTC), newest first.

← April 2021 2021 / May June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

56 results · Clear filters · Feed

  • Critical 9.3
    CVE-2021-21428

    Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator

    Openapi generator is a java tool which allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. openapi-generator-online creates insecure temporary folders with File.createT…

    OpenAPITools openapi-generator org.openapitools:openapi-generator-online Maven
  • Critical 9.1
    CVE-2021-26077

    Improper Authentication in Atlassian Connect Spring Boot

    Broken Authentication in Atlassian Connect Spring Boot (ACSB) in version 1.1.0 before 2.1.3 and from version 2.1.4 before 2.1.5: Atlassian Connect Spring Boot is a Java Spring Boot package for building Atlassian Connect apps. Authentication between Atlassian …

    Atlassian Atlassian Connect Spring Boot (ACSB) com.atlassian.connect:atlassian-connect-spring-boot Maven
  • Critical 9.8
    CVE-2021-31755 Exploited Scanner template EPSS 87%

    An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerabil…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-32090

    Command injection in LocalStack

    The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter.

    localstack PyPI
  • Critical 9.8
    CVE-2021-32030 Exploited Scanner template EPSS 99%

    The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630…

    KEV Jun 2, 2025
  • Critical 9.8
    CVE-2021-20204

    A heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when processing maliciously cr…

    libgetdata libgetdata Debian Ubuntu
  • Critical 9.8
    CVE-2021-1275

    Cisco SD-WAN vManage Software Vulnerabilities

    Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unautho…

    Cisco Cisco SD-WAN vManage Network devices
  • Critical 9.8
    CVE-2021-1508

    Cisco SD-WAN vManage Software Vulnerabilities

    Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unautho…

    Cisco Cisco SD-WAN vManage Network devices
  • Critical 9.8
    CVE-2021-1506

    Cisco SD-WAN vManage Software Vulnerabilities

    Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unautho…

    Cisco Cisco SD-WAN vManage Network devices
  • Critical 9.8
    CVE-2021-1505

    Cisco SD-WAN vManage Software Vulnerabilities

    Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unautho…

    Cisco Cisco SD-WAN vManage Network devices
  • Critical 9.8
    CVE-2021-1498 Exploited Public exploit Scanner template EPSS 100%

    Cisco HyperFlex HX Command Injection Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Det…

    Cisco Cisco HyperFlex HX Data Platform Network devices
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-1497 Exploited Public exploit Scanner template EPSS 100%

    Cisco HyperFlex HX Command Injection Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Det…

    Cisco Cisco HyperFlex HX Data Platform Network devices
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-1468

    Cisco SD-WAN vManage Software Vulnerabilities

    Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unautho…

    Cisco Cisco SD-WAN vManage Network devices
  • Critical 9.8
    CVE-2020-13665

    Drupal Core Access bypass vulnerability

    Access bypass vulnerability in Drupal Core allows JSON:API when JSON:API is in read/write mode. Only sites that have the read_only set to FALSE under jsonapi.settings config are vulnerable. This issue affects: Drupal Drupal Core 8.8.x versions prior to 8.8.8;…

    Drupal Drupal core drupal/core drupal/drupal Web / CMS Packagist
  • Critical 9.8
    CVE-2021-31800 Public exploit EPSS 19%

    Path traversal in impacket

    Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve …

    impacket py3-impacket impacket impacket Debian Ubuntu Alpine PyPI
  • Critical 9.8
    CVE-2021-29369

    Code injection in @rkesters/gnuplot

    The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands.

    @rkesters/gnuplot npm