Skip to content
OpenAdvisories

Archive

May 2021

Vulnerabilities first published in this month (UTC), newest first.

← April 2021 2021 / May June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.5
    CVE-2021-29505 Public exploit EPSS 77%

    XStream is vulnerable to a Remote Command Execution attack

    XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No u…

    x-stream xstream com.thoughtworks.xstream:xstream libxstream-java Debian Ubuntu Maven
  • High 8.8
    CVE-2021-31440 Public exploit

    This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An …

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.0
    CVE-2021-32819 Public exploit EPSS 58%

    Remote code execution in squirrelly

    Squirrelly is a template engine implemented in JavaScript that works out of the box with ExpressJS. Squirrelly mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options remote code…

    squirrellyjs squirrelly squirrelly npm
  • High 8.8
    CVE-2021-31181 Public exploit EPSS 29%

    Microsoft SharePoint Remote Code Execution Vulnerability

    Microsoft SharePoint Remote Code Execution Vulnerability

    Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1
  • High 8.8
    CVE-2021-28664 Exploited Public exploit

    The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unpriv…

    KEV Nov 3, 2021
  • High 8.8
    CVE-2021-28663 Exploited Public exploit EPSS 12%

    The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are …

    KEV Nov 3, 2021
  • High 8.8
    CVE-2020-13664 Public exploit

    Drupal Core Arbitrary PHP code execution vulnerability

    Arbitrary PHP code execution vulnerability in Drupal Core under certain circumstances. An attacker could trick an administrator into visiting a malicious site that could result in creating a carefully named directory on the file system. With this directory in…

    Drupal Drupal core drupal/core drupal/drupal Web / CMS Packagist
  • High 8.8
    CVE-2021-21551 Exploited Public exploit EPSS 80%

    Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privil…

    Dell dbutil
    KEV Mar 31, 2022