CVEs published January 20, 2021
241 CVEs were published on January 20, 2021: 17 critical, 82 high.
- Published
- 241
- Critical
- 17
- High
- 82
- Medium
- 100
- Low
- 8
- Unrated
- 34
- Now in CISA KEV
- 0
- Fix available
- 32
Most affected products
- Oracle MySQL Server
- 38
- Oracle VM VirtualBox
- 17
- Cisco Data Center Network Manager
- 15
- Cisco SD-WAN Solution
- 14
- Oracle WebLogic Server
- 9
- Cisco Smart Software Manager On-Prem
- 8
- Cisco SD-WAN vManage
- 7
- dnsmasq
- 7
- Oracle BI Publisher
- 5
- Oracle iStore
- 5
Critical 17
- CVE-2021-1138Cisco Smart Software Manager Satellite Web UI Command Injection VulnerabilitiesCisco Smart Software Manager On-Prem
- CVE-2021-1139Cisco Smart Software Manager Satellite Web UI Command Injection VulnerabilitiesCisco Smart Software Manager On-Prem
- CVE-2021-1140Cisco Smart Software Manager Satellite Web UI Command Injection VulnerabilitiesCisco Smart Software Manager On-Prem
- CVE-2021-1141Cisco Smart Software Manager Satellite Web UI Command Injection VulnerabilitiesCisco Smart Software Manager On-Prem
- CVE-2021-1142Cisco Smart Software Manager Satellite Web UI Command Injection VulnerabilitiesCisco Smart Software Manager On-Prem
- CVE-2021-1264Cisco DNA Center Command Runner Command Injection VulnerabilityCisco Digital Network Architecture Center
- CVE-2021-1300Cisco SD-WAN Buffer Overflow VulnerabilitiesCisco SD-WAN Solution
- CVE-2021-1301Cisco SD-WAN Buffer Overflow VulnerabilitiesCisco SD-WAN Solution
- CVE-2021-2108Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components).Oracle WebLogic Server
- CVE-2021-2100Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server).Oracle One-to-One Fulfillment
- CVE-2021-2101Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server).Oracle One-to-One Fulfillment
- CVE-2021-2075Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples).Oracle WebLogic Server
- CVE-2021-2064Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components).Oracle WebLogic Server
- CVE-2021-2047Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components).Oracle WebLogic Server
- CVE-2021-2029Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous).Oracle Scripting
- CVE-2021-1994Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services).Oracle WebLogic Server
- CVE-2020-14756Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components).Oracle Utilities Framework
High 82
- CVE-2020-26252Layout XML RCE Vulnerability in OpenMageOpenMage magento-lts
- CVE-2021-1219Cisco Smart Software Manager Satellite Static Credential VulnerabilityCisco Smart Software Manager On-Prem
- CVE-2021-1248Cisco Data Center Network Manager SQL Injection VulnerabilitiesCisco Data Center Network Manager
- CVE-2021-1247Cisco Data Center Network Manager SQL Injection VulnerabilitiesCisco Data Center Network Manager
- CVE-2021-1241Cisco SD-WAN Denial of Service VulnerabilitiesCisco SD-WAN Solution
- CVE-2021-1305Cisco SD-WAN vManage Authorization Bypass VulnerabilitiesCisco SD-WAN vManage
- CVE-2021-1257Cisco DNA Center Cross-Site Request Forgery VulnerabilityCisco Digital Network Architecture Center
- CVE-2021-1260Cisco SD-WAN Command Injection VulnerabilitiesCisco SD-WAN Solution
- CVE-2021-1261Cisco SD-WAN Command Injection VulnerabilitiesCisco SD-WAN Solution
- CVE-2021-1262Cisco SD-WAN Command Injection VulnerabilitiesCisco SD-WAN Solution
- CVE-2021-1263Cisco SD-WAN Command Injection VulnerabilitiesCisco SD-WAN Solution
- CVE-2021-1265Cisco DNA Center Information Disclosure VulnerabilityCisco Digital Network Architecture Center
- CVE-2021-1273Cisco SD-WAN Denial of Service VulnerabilitiesCisco SD-WAN Solution
- CVE-2021-1272Cisco Data Center Network Manager Server-Side Request Forgery VulnerabilityCisco Data Center Network Manager
- CVE-2021-1274Cisco SD-WAN Denial of Service VulnerabilitiesCisco SD-WAN Solution
- CVE-2021-1276Cisco Data Center Network Manager Certificate Validation VulnerabilitiesCisco Data Center Network Manager
- CVE-2021-1277Cisco Data Center Network Manager Certificate Validation VulnerabilitiesCisco Data Center Network Manager
- CVE-2021-1278Cisco SD-WAN Denial of Service VulnerabilitiesCisco SD-WAN Solution
- CVE-2021-1279Cisco SD-WAN Denial of Service VulnerabilitiesCisco SD-WAN Solution
- CVE-2021-1280Cisco Advanced Malware Protection for Endpoints and Immunet for Windows DLL Hijacking VulnerabilityCisco AMP for Endpoints
- CVE-2021-1298Cisco SD-WAN Command Injection VulnerabilitiesCisco SD-WAN Solution
- CVE-2021-1299Cisco SD-WAN Command Injection VulnerabilitiesCisco SD-WAN Solution
- CVE-2021-1302Cisco SD-WAN vManage Authorization Bypass VulnerabilitiesCisco SD-WAN vManage
- CVE-2021-1304Cisco SD-WAN vManage Authorization Bypass VulnerabilitiesCisco SD-WAN vManage
- CVE-2020-27859This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ESMPRO Manager 6.42.NEC ESMPRO Manager
- CVE-2020-27858This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve D2D 16.5.Arcserve D2D
- CVE-2021-21269Path Traversal in Keymakerkeymaker-mx keymaker
- CVE-2020-28483HTTP Response Splittinggithub.com/gin-gonic/gin
- CVE-2020-4983IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who has privileges to submit LSF jobs to execuIBM Spectrum LSF Suite · IBM Spectrum LSF
- CVE-2020-4921IBM Security Guardium 10.6 and 11.2 is vulnerable to SQL injection.IBM Security Guardium
- CVE-2021-2129Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2114Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar).Oracle Common Applications Calendar
- CVE-2021-2115Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Tasks).Oracle Common Applications Calendar
- CVE-2021-2118Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2021-2102Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain (component: Dialog Box).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2021-2103Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain (component: Dialog Box).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2021-2104Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain (component: Dialog Box).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2021-2105Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result).Oracle Customer Interaction History
- CVE-2021-2106Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result).Oracle Customer Interaction History
- CVE-2021-2107Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result).Oracle Customer Interaction History
- CVE-2021-2109Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2021-2092Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2021-2093Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).Oracle Common Applications
- CVE-2021-2094Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server).Oracle One-to-One Fulfillment
- CVE-2021-2096Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2021-2097Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Profile).Oracle iSupport
- CVE-2021-2098Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display).Oracle Email Center
- CVE-2021-2099Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2021-2083Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: User Responsibilities).Oracle iSupport
- CVE-2021-2084Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2021-2085Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2021-2089Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Runtime Catalog).Oracle iStore
- CVE-2021-2090Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display).Oracle Email Center
- CVE-2021-2091Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous).Oracle Scripting
- CVE-2021-2074Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2077Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2021-2078Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet).Oracle Configurator
- CVE-2021-2079Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet).Oracle Configurator
- CVE-2021-2080Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet).Oracle Configurator
- CVE-2021-2082Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2021-2066Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2021-2067Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2021-2068Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2021-2069Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2021-2071Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2021-2062Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Web Server).Oracle BI Publisher
- CVE-2021-2063Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2021-2049Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Administration).Oracle BI Publisher
- CVE-2021-2050Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).Oracle BI Publisher
- CVE-2021-2051Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).Oracle BI Publisher
- CVE-2021-2054Vulnerability in the RDBMS Sharding component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2021-2039Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Search).Oracle Siebel Core - Server Framework
- CVE-2021-2041Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation).Oracle Business Intelligence Enterprise Edition
- CVE-2021-2027Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2021-2034Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Tasks).Oracle Common Applications Calendar
- CVE-2021-2035Vulnerability in the RDBMS Scheduler component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2021-2018Vulnerability in the Advanced Networking Option component of Oracle Database Server.Oracle Advanced Networking Option
- CVE-2021-2025Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General).Oracle Business Intelligence Enterprise Edition
- CVE-2021-2026Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2021-2013Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).Oracle BI Publisher
- CVE-2021-2015Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist).Oracle Workflow
- CVE-2021-1997Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Report).Oracle Hospitality Reporting and Analytics
Medium, low and unrated 142
- CVE-2020-35239A vulnerability exists in CakePHP versions 4.0.x through 4.1.3.cakephp/cakephp
- CVE-2020-24549openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server.
- CVE-2020-27735An XSS issue was discovered in Wing FTP 6.4.4.
- CVE-2021-1069NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVHost function, which may lead to abnormal reboot due to a nNVIDIA SHIELD TV
- CVE-2021-1067NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the implementation of the RPMB command status, in which an attackNVIDIA SHIELD TV
- CVE-2021-1068NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVDEC component, in which an attacker can read from or write NVIDIA SHIELD TV
- CVE-2020-26278Weave Net Pods running in host PID namespace can be used to escalate other Kubernetes vulnerabilitiesweaveworks weave
- CVE-2020-24085A cross-site scripting (XSS) vulnerability exists in MISP v2.4.128 in app/Controller/UserSettingsController.php at SetHomePage() function.
- CVE-2021-1135Cisco Data Center Network Manager REST API VulnerabilitiesCisco Data Center Network Manager
- CVE-2021-1218Cisco Smart Software Manager Satellite Open Redirect VulnerabilityCisco Smart Software Manager On-Prem
- CVE-2021-1222Cisco Smart Software Manager Satellite SQL Injection VulnerabilityCisco Smart Software Manager On-Prem
- CVE-2021-1225Cisco SD-WAN vManage SQL Injection VulnerabilitiesCisco SD-WAN vManage
- CVE-2021-1250Cisco Data Center Network Manager VulnerabilitiesCisco Data Center Network Manager
- CVE-2021-1249Cisco Data Center Network Manager VulnerabilitiesCisco Data Center Network Manager
- CVE-2021-1235Cisco SD-WAN vManage Information Disclosure VulnerabilityCisco SD-WAN vManage
- CVE-2021-1233Cisco SD-WAN Information Disclosure VulnerabilityCisco SD-WAN Solution
- CVE-2021-1253Cisco Data Center Network Manager VulnerabilitiesCisco Data Center Network Manager
- CVE-2021-1312Cisco Elastic Services Controller Denial of Service VulnerabilityCisco Elastic Services Controller
- CVE-2021-1349Cisco SD-WAN vManage Cypher Query Language Injection VulnerabilityCisco SD-WAN vManage
- CVE-2021-1350Cisco Umbrella Dashboard Packet Flood VulnerabilityCisco Umbrella Insights Virtual Appliance
- CVE-2021-1353Cisco StarOS IPv4 Denial of Service VulnerabilityCisco ASR 5000 Series Software
- CVE-2021-1355Cisco Unified Communications Products VulnerabilitiesCisco Unified Communications Manager
- CVE-2021-1357Cisco Unified Communications Products VulnerabilitiesCisco Unified Communications Manager
- CVE-2021-1364Cisco Unified Communications Products VulnerabilitiesCisco Unified Communications Manager
- CVE-2021-1255Cisco Data Center Network Manager REST API VulnerabilitiesCisco Data Center Network Manager
- CVE-2021-1259Cisco SD-WAN vManage Software Path Traversal VulnerabilityCisco SD-WAN vManage
- CVE-2021-1269Cisco Data Center Network Manager Authorization Bypass VulnerabilitiesCisco Data Center Network Manager
- CVE-2021-1270Cisco Data Center Network Manager Authorization Bypass VulnerabilitiesCisco Data Center Network Manager
- CVE-2021-1271Cisco Web Security Appliance Stored Cross-Site Scripting VulnerabilityCisco Web Security Appliance
- CVE-2021-1282Cisco Unified Communications Products VulnerabilitiesCisco Unified Communications Manager
- CVE-2021-1283Cisco Data Center Network Manager Information Disclosure VulnerabilityCisco Data Center Network Manager
- CVE-2021-1286Cisco Data Center Network Manager VulnerabilitiesCisco Data Center Network Manager
- CVE-2021-1303Cisco DNA Center Privilege Escalation VulnerabilityCisco Digital Network Architecture Center
- CVE-2021-1133Cisco Data Center Network Manager REST API VulnerabilitiesCisco Data Center Network Manager
- CVE-2021-1129Cisco Email Security Appliance, Cisco Content Security Management Appliance, and Cisco Web Security Appliance Information Disclosure VulnerabilityCisco Web Security Appliance
- CVE-2020-27298Philips Interventional Workstations OS Command InjectionPhilips Interventional Workspot · Philips Coronary Tools… +1
- CVE-2020-6024Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 54Check Point SmartConsole
- CVE-2020-28452Cross-site Request Forgery (CSRF)com.softwaremill.akka-http-session:core_2.12 · com.softw… +1
- CVE-2020-25686A flaw was found in dnsmasq before version 2.83.dnsmasq
- CVE-2020-25681A flaw was found in dnsmasq before version 2.83.dnsmasq
- CVE-2020-25687A flaw was found in dnsmasq before version 2.83.dnsmasq
- CVE-2020-25682A flaw was found in dnsmasq before 2.83.dnsmasq
- CVE-2021-3130Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users u
- CVE-2020-20949Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube (UM1924).
- CVE-2020-35272Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting (XSS) in the Admin Portal in t
- CVE-2020-35271Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting (XSS) in the Employees, First
- CVE-2020-25683A flaw was found in dnsmasq before version 2.83.dnsmasq
- CVE-2020-25684A flaw was found in dnsmasq before version 2.83.dnsmasq
- CVE-2020-14360A flaw was found in the X.Org Server before version 1.20.10.xorg-x11-server
- CVE-2020-4887IBM AIX 7.1, 7.2 and AIX VIOS 3.1 could allow a local user to exploit a vulnerability in the gencore user command to create arbitrary files IBM AIX · IBM VIOS
- CVE-2020-4688IBM Security Guardium 10.6 and 11.2 could allow a local attacker to execute arbitrary commands on the system as an unprivileged user, causedIBM Security Guardium
- CVE-2021-2130Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2131Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2121Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2122Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2021-2123Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2124Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2125Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2126Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2127Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2128Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2111Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2112Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2113Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Oracle Financial Services Revenue Management and Billing
- CVE-2021-2116Vulnerability in the Oracle Application Express Opportunity Tracker component of Oracle Database Server.Oracle Application Express
- CVE-2021-2117Vulnerability in the Oracle Application Express Survey Builder component of Oracle Database Server.Oracle Application Express
- CVE-2021-2119Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2120Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2110Vulnerability in the Oracle Argus Safety product of Oracle Health Sciences Applications (component: Letters).Oracle Argus Safety
- CVE-2021-2086Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2087Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2021-2088Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2021-2076Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2081Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).Oracle MySQL Server
- CVE-2021-2065Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2070Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2072Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).Oracle MySQL Server
- CVE-2021-2073Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2056Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2021-2057Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: InternaOracle Retail Customer Management and Segmentation Foundati…
- CVE-2021-2058Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking).Oracle MySQL Server
- CVE-2021-2059Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Web interface).Oracle iStore
- CVE-2021-2060Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2061Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2021-2046Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).Oracle MySQL Server
- CVE-2021-2048Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2021-2052Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).Oracle JD Edwards EnterpriseOne Orchestrator
- CVE-2021-2055Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2036Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2038Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).Oracle MySQL Server
- CVE-2021-2040Vulnerability in the Oracle Argus Safety product of Oracle Health Sciences Applications (component: Case Form, Local Affiliate Form).Oracle Argus Safety
- CVE-2021-2042Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2021-2043Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2021-2044Vulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft (component: Financial Sanctions).Oracle PeopleSoft Enterprise FIN Payables
- CVE-2021-2045Vulnerability in the Oracle Text component of Oracle Database Server.Oracle Text
- CVE-2021-2028Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2021-2030Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2031Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2032Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema).Oracle MySQL Server
- CVE-2021-2033Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components).Oracle WebLogic Server
- CVE-2021-2019Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2021-2020Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2021Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2022Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2021-2023Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs).Oracle Installed Base
- CVE-2021-2024Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2009Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles).Oracle MySQL Server
- CVE-2021-2010Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).Oracle MySQL Server
- CVE-2021-2011Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).Oracle MySQL Server
- CVE-2021-2012Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2021-2014Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin).Oracle MySQL Server
- CVE-2021-2016Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2017Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation).Oracle User Management
- CVE-2021-1999Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: RAS subsystems).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2021-2000Vulnerability in the Unified Audit component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2021-2001Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2002Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server
- CVE-2021-2003Vulnerability in the Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web Dashboards).Oracle Business Intelligence Enterprise Edition
- CVE-2021-2004Vulnerability in the Siebel Core - Server BizLogic Script product of Oracle Siebel CRM (component: Integration - Scripting).Oracle Siebel Core - Server Framework
- CVE-2021-2005Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2021-2006Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).Oracle MySQL Server
- CVE-2021-2007Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).Oracle MySQL Server
- CVE-2021-1993Vulnerability in the Java VM component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2021-1995Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services).Oracle WebLogic Server
- CVE-2021-1996Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services).Oracle WebLogic Server
- CVE-2021-1998Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-23326Command Injection@graphql-tools/git-loader
- CVE-2020-35217Vert.x-Web framework v4.0 milestone 1-4 does not perform a correct CSRF verification.io.vertx:vertx-web
- CVE-2021-3110The store system in PrestaShop 1.7.7.0 allows time-based boolean SQL injection via the module=productcomments controller=CommentGrade id_pro
- CVE-2021-3137XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section.org.xwiki.commons:xwiki-commons
- CVE-2020-27851Multiple stored HTML injection vulnerabilities in the "poll" and "quiz" features in an additional paid add-on of Rocketgenius Gravity Forms wp-premium/gravityforms
- CVE-2020-27852A stored Cross-Site Scripting (XSS) vulnerability in the survey feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackers wp-premium/gravityforms
- CVE-2020-27850A stored Cross-Site Scripting (XSS) vulnerability in forms import feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackerwp-premium/gravityforms
- CVE-2020-13133Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS.
- CVE-2020-13134Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS.
- CVE-2020-25385Nagios Log Server 2.1.7 contains a cross-site scripting (XSS) vulnerability in /nagioslogserver/configure/create_snapshot through the snapsh
- CVE-2020-19364OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious PHP scripts through /controller.php.
- CVE-2020-19363Vtiger CRM v7.2.0 allows an attacker to display hidden files, list directories by using /libraries and /layout directories.
- CVE-2020-19362Reflected XSS in Vtiger CRM v7.2.0 in vtigercrm/index.php? through the view parameter can result in an attacker performing malicious actions
- CVE-2020-19361Reflected XSS in Medintux v2.16.000 CCAM.php by manipulating the mot1 parameter can result in an attacker performing malicious actions to us
- CVE-2020-19360Local file inclusion in FHEM 6.0 allows in fhem/FileLog_logWrapper file parameter can allow an attacker to include a file, which can lead to
- CVE-2020-25685A flaw was found in dnsmasq before version 2.83.dnsmasq