Skip to content
OpenAdvisories

Archive

2 July 2021

Vulnerabilities first published on this day (UTC), newest first.

← June 2021 2021 / July /2 August 2021 →
  1. 157
  2. 263
  3. 3 
  4. 4 
  5. 56
  6. 626
  7. 7108
  8. 866
  9. 961
  10. 102
  11. 115
  12. 1288
  13. 13139
  14. 14172
  15. 1583
  16. 1657
  17. 175
  18. 181
  19. 1961
  20. 20174
  21. 2185
  22. 2290
  23. 2320
  24. 241
  25. 2534
  26. 2662
  27. 2740
  28. 2828
  29. 2928
  30. 3016
  31. 316
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2021-34527 Exploited · Ransomware Public exploit EPSS 100%

    Windows Print Spooler Remote Code Execution Vulnerability

    A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could th…

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Nov 3, 2021
  • High 8.8
    CVE-2021-30554 Exploited

    Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap c…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
    KEV Nov 3, 2021
  • High 8.4
    CVE-2021-32737

    XSS Injection in Media Collection Title was possible

    Sulu is an open-source PHP content management system based on the Symfony framework. In versions of Sulu prior to 1.6.41, it is possible for a logged in admin user to add a script injection (cross-site-scripting) in the collection title. The problem is patche…

    sulu sulu sulu/sulu Packagist
  • High 7.3
    CVE-2021-23403

    Prototype Pollution

    All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge() function due to lack of validation input.

    ts-nodash npm
  • High 7.3
    CVE-2021-23402

    Prototype Pollution

    All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality.

    record-like-deep-assign npm
  • High 7.2
    CVE-2021-32639

    Server-Side Request Forgery (SSRF) in emissary:emissary

    Emissary is a P2P-based, data-driven workflow engine. Emissary version 6.4.0 is vulnerable to Server-Side Request Forgery (SSRF). In particular, the `RegisterPeerAction` endpoint and the `AddChildDirectoryAction` endpoint are vulnerable to SSRF. This vulnerab…

    NationalSecurityAgency emissary
  • High 7.1
    CVE-2021-32735

    Cross-site scripting (XSS) from field and configuration text displayed in the Panel

    Kirby is a content management system. In Kirby CMS versions 3.5.5 and 3.5.6, the Panel's `ListItem` component (used in the pages and files section for example) displayed HTML in page titles as it is. This could be used for cross-site scripting (XSS) attacks. …

    getkirby kirby getkirby/cms Packagist