Skip to main content
CVE-2021-32096 May 07, 04:15 HIGH POC This Week

The ConsoleAction component of U.S. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CSRF Emissary Nsa
NVD
CVSS 3.1
8.8
EPSS
0.6%
CVE-2021-27574 May 07, 19:31 HIGH POC This Week

An issue was discovered in Emote Remote Mouse through 4.0.0.0. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Emote Remote Mouse Remotemouse
NVD
CVSS 3.1
8.1
EPSS
1.1%
CVE-2021-27572 May 07, 19:31 HIGH POC This Week

An issue was discovered in Emote Remote Mouse through 4.0.0.0. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Authentication Bypass RCE Emote Remote Mouse Remotemouse
NVD
CVSS 3.1
8.1
EPSS
3.2%
CVE-2021-29499 May 07, 21:15 HIGH POC PATCH This Week

SIF is an open source implementation of the Singularity Container Image Format. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Singularity Image Format Sylabs
NVD GitHub
CVSS 3.1
7.5
EPSS
1.0%
CVE-2021-32074 May 07, 05:15 HIGH POC PATCH This Week

HashiCorp vault-action (aka Vault GitHub Action) before 2.2.0 allows attackers to obtain sensitive information from log files because a multi-line secret was not correctly registered with GitHub. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Hashicorp Vault Action
NVD GitHub
CVSS 3.1
7.5
EPSS
1.9%
CVE-2021-32104 May 07, 04:15 HIGH PATCH This Week

A SQL injection vulnerability exists (with user privileges) in interface/forms/eye_mag/save.php in OpenEMR 5.0.2.1. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

PHP SQLi Openemr Open Emr
NVD
CVSS 3.1
8.8
EPSS
1.2%
CVE-2021-32102 May 07, 04:15 HIGH PATCH This Week

A SQL injection vulnerability exists (with user privileges) in library/custom_template/ajax_code.php in OpenEMR 5.0.2.1. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

PHP SQLi Openemr Open Emr
NVD
CVSS 3.1
8.8
EPSS
1.2%
CVE-2021-32094 May 07, 04:15 HIGH This Week

U.S. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

File Upload Emissary Nsa
NVD
CVSS 3.1
8.8
EPSS
1.2%
CVE-2021-32101 May 07, 04:15 HIGH This Week

The Patient Portal of OpenEMR 5.0.2.1 is affected by a incorrect access control system in portal/patient/_machine_config.php. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Authentication Bypass Openemr Open Emr
NVD
CVSS 3.1
8.2
EPSS
1.2%
CVE-2021-32095 May 07, 04:15 HIGH This Week

U.S. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Emissary Nsa
NVD
CVSS 3.1
8.1
EPSS
0.9%
CVE-2021-22673 May 07, 14:15 HIGH This Week

The affected product is vulnerable to stack-based buffer overflow while processing over-the-air firmware updates from the CDN server, which may allow an attacker to remotely execute code on the. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Stack Overflow Cc3100 Software Development Kit Cc3200 Software Development Kit Simplelink Cc13X0 Software Development Kit +5
NVD
CVSS 3.1
8.0
EPSS
1.2%
CVE-2021-31472 May 07, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption 3D Foxitsoftware
NVD
CVSS 3.1
7.8
EPSS
2.8%
CVE-2021-31470 May 07, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption 3D Foxitsoftware
NVD
CVSS 3.1
7.8
EPSS
2.8%
CVE-2021-31468 May 07, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure 3D Foxitsoftware
NVD
CVSS 3.1
7.8
EPSS
2.8%
CVE-2021-31466 May 07, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure 3D Foxitsoftware
NVD
CVSS 3.1
7.8
EPSS
2.8%
CVE-2021-31465 May 07, 21:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption 3D Foxitsoftware
NVD
CVSS 3.1
7.8
EPSS
2.8%
CVE-2021-31461 May 07, 21:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Access of Resource Using Incompatible Type (Type Confusion) vulnerability could allow attackers to execute arbitrary code by exploiting type confusion in the application.

RCE Memory Corruption Reader Phantompdf Foxitsoftware
NVD
CVSS 3.1
7.8
EPSS
4.3%
CVE-2021-31460 May 07, 21:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Reader Phantompdf +1
NVD
CVSS 3.1
7.8
EPSS
2.8%
CVE-2021-31459 May 07, 21:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Reader Phantompdf +1
NVD
CVSS 3.1
7.8
EPSS
2.8%
CVE-2021-31458 May 07, 21:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Reader Phantompdf +1
NVD
CVSS 3.1
7.8
EPSS
2.8%
CVE-2021-31457 May 07, 21:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Reader Phantompdf +1
NVD
CVSS 3.1
7.8
EPSS
2.8%
CVE-2021-31456 May 07, 21:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Reader Phantompdf +1
NVD
CVSS 3.1
7.8
EPSS
2.8%
CVE-2021-31455 May 07, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Foxit Reader Phantompdf +1
NVD
CVSS 3.1
7.8
EPSS
2.8%
CVE-2021-31454 May 07, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Foxit Reader Phantompdf +1
NVD
CVSS 3.1
7.8
EPSS
2.5%
CVE-2021-31453 May 07, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Foxit Reader Phantompdf +1
NVD
CVSS 3.1
7.8
EPSS
2.8%
CVE-2021-31452 May 07, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Foxit Reader Phantompdf +1
NVD
CVSS 3.1
7.8
EPSS
2.9%
CVE-2021-31451 May 07, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Foxit Reader Phantompdf +1
NVD
CVSS 3.1
7.8
EPSS
2.8%
CVE-2021-31450 May 07, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Foxit Reader Phantompdf +1
NVD
CVSS 3.1
7.8
EPSS
2.8%
CVE-2021-31449 May 07, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Foxit Reader Phantompdf Foxitsoftware
NVD
CVSS 3.1
7.8
EPSS
2.8%
CVE-2021-31442 May 07, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Foxit Reader Phantompdf +1
NVD
CVSS 3.1
7.8
EPSS
2.8%
CVE-2021-31441 May 07, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Foxit Reader Phantompdf +1
NVD
CVSS 3.1
7.8
EPSS
2.8%
CVE-2021-22677 May 07, 16:15 HIGH This Week

An integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network may lead to issues such as a denial-of-service condition or code execution on the SimpleLink Wi-Fi. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Integer Overflow Cc3100 Software Development Kit Cc3200 Software Development Kit Simplelink Cc13X0 Software Development Kit +5
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-1927 May 07, 09:15 HIGH PATCH This Week

Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Denial Of Service Use After Free Memory Corruption Qualcomm Apq8017 Firmware +456
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2021-1915 May 07, 09:15 HIGH This Week

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Aqt1000 Firmware Ar8031 Firmware Ar8035 Firmware +401
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2021-1905 May 07, 09:15 HIGH KEV PATCH THREAT This Week

Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Denial Of Service Use After Free Memory Corruption Qualcomm Apq8017 Firmware +395
NVD
CVSS 3.1
7.8
EPSS
1.1%
CVE-2021-1895 May 07, 09:15 HIGH PATCH This Week

Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Integer Overflow Qualcomm Apq8017 Firmware Aqt1000 Firmware +412
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2021-1891 May 07, 09:15 HIGH PATCH This Week

A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Information Disclosure Use After Free Memory Corruption Qualcomm Apq8017 Firmware +413
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2021-29495 May 07, 16:15 HIGH This Week

Nim is a statically typed compiled systems programming language. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Nim Nim Lang
NVD GitHub
CVSS 3.1
7.5
EPSS
0.5%
CVE-2021-1925 May 07, 09:15 HIGH This Week

Possible denial of service scenario due to improper handling of group management action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Qualcomm Aqt1000 Firmware Ar8031 Firmware Ar8035 Firmware +404
NVD
CVSS 3.1
7.5
EPSS
0.6%
CVE-2021-22675 May 07, 13:15 HIGH This Week

The affected product is vulnerable to integer overflow while parsing malformed over-the-air firmware update files, which may allow an attacker to remotely execute code on SimpleLink Wi-Fi (MSP432E4. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Integer Overflow Cc3100 Software Development Kit Cc3200 Software Development Kit Simplelink Cc13X0 Software Development Kit +5
NVD
CVSS 3.1
7.2
EPSS
1.4%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy