# CVEs published 2021-05-29

6 CVEs were published on May 29, 2021: 0 critical, 0 high. Days are UTC.

- [CVE-2021-33564](https://cve.now/CVE-2021-33564.md): An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files (no CVSS, dragonfly)
- [CVE-2021-31703](https://cve.now/CVE-2021-31703.md): Frontier ichris through 5.18 allows users to upload malicious executable files that might later be downloaded and run by any client user. (no CVSS)
- [CVE-2021-31702](https://cve.now/CVE-2021-31702.md): Frontier ichris through 5.18 mishandles making a DNS request for the hostname in the HTTP Host header, as demonstrated by submitting 127.0.0 (no CVSS)
- [CVE-2021-30461](https://cve.now/CVE-2021-30461.md): A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. (no CVSS)
- [CVE-2021-25641](https://cve.now/CVE-2021-25641.md): Dubbo Zookeeper does not check serialization id (no CVSS, Apache Software Foundation Apache Dubbo · org.apache.dub… +1)
- [CVE-2021-30181](https://cve.now/CVE-2021-30181.md): Apache Dubbo RCE on customers via Script route poisoning (Nashorn script injection) (no CVSS, Apache Software Foundation Apache Dubbo · com.alibaba:du… +1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-05-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.