# CVEs published 2021-01-20

241 CVEs were published on January 20, 2021: 17 critical, 82 high. Days are UTC.

- [CVE-2020-35239](https://cve.now/CVE-2020-35239.md): A vulnerability exists in CakePHP versions 4.0.x through 4.1.3. (no CVSS, cakephp/cakephp)
- [CVE-2020-24549](https://cve.now/CVE-2020-24549.md): openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server. (no CVSS)
- [CVE-2020-27735](https://cve.now/CVE-2020-27735.md): An XSS issue was discovered in Wing FTP 6.4.4. (no CVSS)
- [CVE-2021-1069](https://cve.now/CVE-2021-1069.md): NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVHost function, which may lead to abnormal reboot due to a n (no CVSS, NVIDIA SHIELD TV)
- [CVE-2021-1067](https://cve.now/CVE-2021-1067.md): NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the implementation of the RPMB command status, in which an attack (no CVSS, NVIDIA SHIELD TV)
- [CVE-2021-1068](https://cve.now/CVE-2021-1068.md): NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVDEC component, in which an attacker can read from or write (no CVSS, NVIDIA SHIELD TV)
- [CVE-2020-26278](https://cve.now/CVE-2020-26278.md): Weave Net Pods running in host PID namespace can be used to escalate other Kubernetes vulnerabilities (CVSS 5.8, weaveworks weave)
- [CVE-2020-26252](https://cve.now/CVE-2020-26252.md): Layout XML RCE Vulnerability in OpenMage (CVSS 8.7, OpenMage magento-lts)
- [CVE-2020-24085](https://cve.now/CVE-2020-24085.md): A cross-site scripting (XSS) vulnerability exists in MISP v2.4.128 in app/Controller/UserSettingsController.php at SetHomePage() function. (no CVSS)
- [CVE-2021-1135](https://cve.now/CVE-2021-1135.md): Cisco Data Center Network Manager REST API Vulnerabilities (CVSS 4.6, Cisco Data Center Network Manager)
- [CVE-2021-1138](https://cve.now/CVE-2021-1138.md): Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities (CVSS 9.8, Cisco Smart Software Manager On-Prem)
- [CVE-2021-1139](https://cve.now/CVE-2021-1139.md): Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities (CVSS 9.8, Cisco Smart Software Manager On-Prem)
- [CVE-2021-1140](https://cve.now/CVE-2021-1140.md): Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities (CVSS 9.8, Cisco Smart Software Manager On-Prem)
- [CVE-2021-1141](https://cve.now/CVE-2021-1141.md): Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities (CVSS 9.8, Cisco Smart Software Manager On-Prem)
- [CVE-2021-1142](https://cve.now/CVE-2021-1142.md): Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities (CVSS 9.8, Cisco Smart Software Manager On-Prem)
- [CVE-2021-1218](https://cve.now/CVE-2021-1218.md): Cisco Smart Software Manager Satellite Open Redirect Vulnerability (CVSS 4.6, Cisco Smart Software Manager On-Prem)
- [CVE-2021-1219](https://cve.now/CVE-2021-1219.md): Cisco Smart Software Manager Satellite Static Credential Vulnerability (CVSS 7.8, Cisco Smart Software Manager On-Prem)
- [CVE-2021-1222](https://cve.now/CVE-2021-1222.md): Cisco Smart Software Manager Satellite SQL Injection Vulnerability (CVSS 6.8, Cisco Smart Software Manager On-Prem)
- [CVE-2021-1225](https://cve.now/CVE-2021-1225.md): Cisco SD-WAN vManage SQL Injection Vulnerabilities (CVSS 6.5, Cisco SD-WAN vManage)
- [CVE-2021-1250](https://cve.now/CVE-2021-1250.md): Cisco Data Center Network Manager Vulnerabilities (CVSS 6.5, Cisco Data Center Network Manager)
- [CVE-2021-1249](https://cve.now/CVE-2021-1249.md): Cisco Data Center Network Manager Vulnerabilities (CVSS 6.5, Cisco Data Center Network Manager)
- [CVE-2021-1248](https://cve.now/CVE-2021-1248.md): Cisco Data Center Network Manager SQL Injection Vulnerabilities (CVSS 8.8, Cisco Data Center Network Manager)
- [CVE-2021-1247](https://cve.now/CVE-2021-1247.md): Cisco Data Center Network Manager SQL Injection Vulnerabilities (CVSS 8.8, Cisco Data Center Network Manager)
- [CVE-2021-1241](https://cve.now/CVE-2021-1241.md): Cisco SD-WAN Denial of Service Vulnerabilities (CVSS 8.6, Cisco SD-WAN Solution)
- [CVE-2021-1235](https://cve.now/CVE-2021-1235.md): Cisco SD-WAN vManage Information Disclosure Vulnerability (CVSS 5.5, Cisco SD-WAN vManage)
- [CVE-2021-1233](https://cve.now/CVE-2021-1233.md): Cisco SD-WAN Information Disclosure Vulnerability (CVSS 4.4, Cisco SD-WAN Solution)
- [CVE-2021-1253](https://cve.now/CVE-2021-1253.md): Cisco Data Center Network Manager Vulnerabilities (CVSS 6.5, Cisco Data Center Network Manager)
- [CVE-2021-1305](https://cve.now/CVE-2021-1305.md): Cisco SD-WAN vManage Authorization Bypass Vulnerabilities (CVSS 8.8, Cisco SD-WAN vManage)
- [CVE-2021-1312](https://cve.now/CVE-2021-1312.md): Cisco Elastic Services Controller Denial of Service Vulnerability (CVSS 5.3, Cisco Elastic Services Controller)
- [CVE-2021-1349](https://cve.now/CVE-2021-1349.md): Cisco SD-WAN vManage Cypher Query Language Injection Vulnerability (CVSS 6.5, Cisco SD-WAN vManage)
- [CVE-2021-1350](https://cve.now/CVE-2021-1350.md): Cisco Umbrella Dashboard Packet Flood Vulnerability (CVSS 5.3, Cisco Umbrella Insights Virtual Appliance)
- [CVE-2021-1353](https://cve.now/CVE-2021-1353.md): Cisco StarOS IPv4 Denial of Service Vulnerability (CVSS 5.8, Cisco ASR 5000 Series Software)
- [CVE-2021-1355](https://cve.now/CVE-2021-1355.md): Cisco Unified Communications Products Vulnerabilities (CVSS 6.5, Cisco Unified Communications Manager)
- [CVE-2021-1357](https://cve.now/CVE-2021-1357.md): Cisco Unified Communications Products Vulnerabilities (CVSS 6.5, Cisco Unified Communications Manager)
- [CVE-2021-1364](https://cve.now/CVE-2021-1364.md): Cisco Unified Communications Products Vulnerabilities (CVSS 6.5, Cisco Unified Communications Manager)
- [CVE-2021-1255](https://cve.now/CVE-2021-1255.md): Cisco Data Center Network Manager REST API Vulnerabilities (CVSS 4.6, Cisco Data Center Network Manager)
- [CVE-2021-1257](https://cve.now/CVE-2021-1257.md): Cisco DNA Center Cross-Site Request Forgery Vulnerability (CVSS 7.1, Cisco Digital Network Architecture Center)
- [CVE-2021-1259](https://cve.now/CVE-2021-1259.md): Cisco SD-WAN vManage Software Path Traversal Vulnerability (CVSS 5.3, Cisco SD-WAN vManage)
- [CVE-2021-1260](https://cve.now/CVE-2021-1260.md): Cisco SD-WAN Command Injection Vulnerabilities (CVSS 8.1, Cisco SD-WAN Solution)
- [CVE-2021-1261](https://cve.now/CVE-2021-1261.md): Cisco SD-WAN Command Injection Vulnerabilities (CVSS 8.1, Cisco SD-WAN Solution)
- [CVE-2021-1262](https://cve.now/CVE-2021-1262.md): Cisco SD-WAN Command Injection Vulnerabilities (CVSS 8.1, Cisco SD-WAN Solution)
- [CVE-2021-1263](https://cve.now/CVE-2021-1263.md): Cisco SD-WAN Command Injection Vulnerabilities (CVSS 8.1, Cisco SD-WAN Solution)
- [CVE-2021-1264](https://cve.now/CVE-2021-1264.md): Cisco DNA Center Command Runner Command Injection Vulnerability (CVSS 9.6, Cisco Digital Network Architecture Center)
- [CVE-2021-1265](https://cve.now/CVE-2021-1265.md): Cisco DNA Center Information Disclosure Vulnerability (CVSS 7.7, Cisco Digital Network Architecture Center)
- [CVE-2021-1269](https://cve.now/CVE-2021-1269.md): Cisco Data Center Network Manager Authorization Bypass Vulnerabilities (CVSS 6.3, Cisco Data Center Network Manager)
- [CVE-2021-1270](https://cve.now/CVE-2021-1270.md): Cisco Data Center Network Manager Authorization Bypass Vulnerabilities (CVSS 6.3, Cisco Data Center Network Manager)
- [CVE-2021-1271](https://cve.now/CVE-2021-1271.md): Cisco Web Security Appliance Stored Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Web Security Appliance)
- [CVE-2021-1273](https://cve.now/CVE-2021-1273.md): Cisco SD-WAN Denial of Service Vulnerabilities (CVSS 8.6, Cisco SD-WAN Solution)
- [CVE-2021-1272](https://cve.now/CVE-2021-1272.md): Cisco Data Center Network Manager Server-Side Request Forgery Vulnerability (CVSS 8.8, Cisco Data Center Network Manager)
- [CVE-2021-1274](https://cve.now/CVE-2021-1274.md): Cisco SD-WAN Denial of Service Vulnerabilities (CVSS 8.6, Cisco SD-WAN Solution)
- [CVE-2021-1276](https://cve.now/CVE-2021-1276.md): Cisco Data Center Network Manager Certificate Validation Vulnerabilities (CVSS 7.5, Cisco Data Center Network Manager)
- [CVE-2021-1277](https://cve.now/CVE-2021-1277.md): Cisco Data Center Network Manager Certificate Validation Vulnerabilities (CVSS 7.5, Cisco Data Center Network Manager)
- [CVE-2021-1278](https://cve.now/CVE-2021-1278.md): Cisco SD-WAN Denial of Service Vulnerabilities (CVSS 8.6, Cisco SD-WAN Solution)
- [CVE-2021-1279](https://cve.now/CVE-2021-1279.md): Cisco SD-WAN Denial of Service Vulnerabilities (CVSS 8.6, Cisco SD-WAN Solution)
- [CVE-2021-1280](https://cve.now/CVE-2021-1280.md): Cisco Advanced Malware Protection for Endpoints and Immunet for Windows DLL Hijacking Vulnerability (CVSS 7.8, Cisco AMP for Endpoints)
- [CVE-2021-1282](https://cve.now/CVE-2021-1282.md): Cisco Unified Communications Products Vulnerabilities (CVSS 6.5, Cisco Unified Communications Manager)
- [CVE-2021-1283](https://cve.now/CVE-2021-1283.md): Cisco Data Center Network Manager Information Disclosure Vulnerability (CVSS 5.5, Cisco Data Center Network Manager)
- [CVE-2021-1286](https://cve.now/CVE-2021-1286.md): Cisco Data Center Network Manager Vulnerabilities (CVSS 6.5, Cisco Data Center Network Manager)
- [CVE-2021-1298](https://cve.now/CVE-2021-1298.md): Cisco SD-WAN Command Injection Vulnerabilities (CVSS 8.1, Cisco SD-WAN Solution)
- [CVE-2021-1299](https://cve.now/CVE-2021-1299.md): Cisco SD-WAN Command Injection Vulnerabilities (CVSS 8.1, Cisco SD-WAN Solution)
- [CVE-2021-1300](https://cve.now/CVE-2021-1300.md): Cisco SD-WAN Buffer Overflow Vulnerabilities (CVSS 9.8, Cisco SD-WAN Solution)
- [CVE-2021-1301](https://cve.now/CVE-2021-1301.md): Cisco SD-WAN Buffer Overflow Vulnerabilities (CVSS 9.8, Cisco SD-WAN Solution)
- [CVE-2021-1302](https://cve.now/CVE-2021-1302.md): Cisco SD-WAN vManage Authorization Bypass Vulnerabilities (CVSS 8.8, Cisco SD-WAN vManage)
- [CVE-2021-1303](https://cve.now/CVE-2021-1303.md): Cisco DNA Center Privilege Escalation Vulnerability (CVSS 4.3, Cisco Digital Network Architecture Center)
- [CVE-2021-1304](https://cve.now/CVE-2021-1304.md): Cisco SD-WAN vManage Authorization Bypass Vulnerabilities (CVSS 8.8, Cisco SD-WAN vManage)
- [CVE-2020-27859](https://cve.now/CVE-2020-27859.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ESMPRO Manager 6.42. (CVSS 7.5, NEC ESMPRO Manager)
- [CVE-2020-27858](https://cve.now/CVE-2020-27858.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve D2D 16.5. (CVSS 7.5, Arcserve D2D)
- [CVE-2021-1133](https://cve.now/CVE-2021-1133.md): Cisco Data Center Network Manager REST API Vulnerabilities (CVSS 4.6, Cisco Data Center Network Manager)
- [CVE-2021-1129](https://cve.now/CVE-2021-1129.md): Cisco Email Security Appliance, Cisco Content Security Management Appliance, and Cisco Web Security Appliance Information Disclosure Vulnerability (CVSS 5.3, Cisco Web Security Appliance)
- [CVE-2020-27298](https://cve.now/CVE-2020-27298.md): Philips Interventional Workstations OS Command Injection (CVSS 6.5, Philips Interventional Workspot · Philips Coronary Tools… +1)
- [CVE-2020-6024](https://cve.now/CVE-2020-6024.md): Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 54 (no CVSS, Check Point SmartConsole)
- [CVE-2021-21269](https://cve.now/CVE-2021-21269.md): Path Traversal in Keymaker (CVSS 7.7, keymaker-mx keymaker)
- [CVE-2020-28452](https://cve.now/CVE-2020-28452.md): Cross-site Request Forgery (CSRF) (CVSS 6.3, com.softwaremill.akka-http-session:core\_2.12 · com.softw… +1)
- [CVE-2020-28483](https://cve.now/CVE-2020-28483.md): HTTP Response Splitting (CVSS 7.1, github.com/gin-gonic/gin)
- [CVE-2020-25686](https://cve.now/CVE-2020-25686.md): A flaw was found in dnsmasq before version 2.83. (no CVSS, dnsmasq)
- [CVE-2020-25681](https://cve.now/CVE-2020-25681.md): A flaw was found in dnsmasq before version 2.83. (no CVSS, dnsmasq)
- [CVE-2020-25687](https://cve.now/CVE-2020-25687.md): A flaw was found in dnsmasq before version 2.83. (no CVSS, dnsmasq)
- [CVE-2020-25682](https://cve.now/CVE-2020-25682.md): A flaw was found in dnsmasq before 2.83. (no CVSS, dnsmasq)
- [CVE-2021-3130](https://cve.now/CVE-2021-3130.md): Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users u (no CVSS)
- [CVE-2020-20949](https://cve.now/CVE-2020-20949.md): Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube (UM1924). (no CVSS)
- [CVE-2020-35272](https://cve.now/CVE-2020-35272.md): Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting (XSS) in the Admin Portal in t (no CVSS)
- [CVE-2020-35271](https://cve.now/CVE-2020-35271.md): Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting (XSS) in the Employees, First (no CVSS)
- [CVE-2020-25683](https://cve.now/CVE-2020-25683.md): A flaw was found in dnsmasq before version 2.83. (no CVSS, dnsmasq)
- [CVE-2020-25684](https://cve.now/CVE-2020-25684.md): A flaw was found in dnsmasq before version 2.83. (no CVSS, dnsmasq)
- [CVE-2020-14360](https://cve.now/CVE-2020-14360.md): A flaw was found in the X.Org Server before version 1.20.10. (no CVSS, xorg-x11-server)
- [CVE-2020-4983](https://cve.now/CVE-2020-4983.md): IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who has privileges to submit LSF jobs to execu (CVSS 7.4, IBM Spectrum LSF Suite · IBM Spectrum LSF)
- [CVE-2020-4921](https://cve.now/CVE-2020-4921.md): IBM Security Guardium 10.6 and 11.2 is vulnerable to SQL injection. (CVSS 7.6, IBM Security Guardium)
- [CVE-2020-4887](https://cve.now/CVE-2020-4887.md): IBM AIX 7.1, 7.2 and AIX VIOS 3.1 could allow a local user to exploit a vulnerability in the gencore user command to create arbitrary files (CVSS 6.2, IBM AIX · IBM VIOS)
- [CVE-2020-4688](https://cve.now/CVE-2020-4688.md): IBM Security Guardium 10.6 and 11.2 could allow a local attacker to execute arbitrary commands on the system as an unprivileged user, caused (CVSS 5.9, IBM Security Guardium)
- [CVE-2021-2130](https://cve.now/CVE-2021-2130.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 4.4, Oracle VM VirtualBox)
- [CVE-2021-2131](https://cve.now/CVE-2021-2131.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2021-2121](https://cve.now/CVE-2021-2121.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2021-2122](https://cve.now/CVE-2021-2122.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2123](https://cve.now/CVE-2021-2123.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 3.2, Oracle VM VirtualBox)
- [CVE-2021-2124](https://cve.now/CVE-2021-2124.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2021-2125](https://cve.now/CVE-2021-2125.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 4.6, Oracle VM VirtualBox)
- [CVE-2021-2126](https://cve.now/CVE-2021-2126.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2021-2127](https://cve.now/CVE-2021-2127.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 4.4, Oracle VM VirtualBox)
- [CVE-2021-2128](https://cve.now/CVE-2021-2128.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2021-2129](https://cve.now/CVE-2021-2129.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.9, Oracle VM VirtualBox)
- [CVE-2021-2111](https://cve.now/CVE-2021-2111.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2021-2112](https://cve.now/CVE-2021-2112.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2021-2113](https://cve.now/CVE-2021-2113.md): Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: (CVSS 4.3, Oracle Financial Services Revenue Management and Billing)
- [CVE-2021-2114](https://cve.now/CVE-2021-2114.md): Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar). (CVSS 8.2, Oracle Common Applications Calendar)
- [CVE-2021-2115](https://cve.now/CVE-2021-2115.md): Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Tasks). (CVSS 7.6, Oracle Common Applications Calendar)
- [CVE-2021-2116](https://cve.now/CVE-2021-2116.md): Vulnerability in the Oracle Application Express Opportunity Tracker component of Oracle Database Server. (CVSS 5.4, Oracle Application Express)
- [CVE-2021-2117](https://cve.now/CVE-2021-2117.md): Vulnerability in the Oracle Application Express Survey Builder component of Oracle Database Server. (CVSS 5.4, Oracle Application Express)
- [CVE-2021-2118](https://cve.now/CVE-2021-2118.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2021-2119](https://cve.now/CVE-2021-2119.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2021-2120](https://cve.now/CVE-2021-2120.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2021-2102](https://cve.now/CVE-2021-2102.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain (component: Dialog Box). (CVSS 8.2, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2021-2103](https://cve.now/CVE-2021-2103.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain (component: Dialog Box). (CVSS 8.2, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2021-2104](https://cve.now/CVE-2021-2104.md): Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain (component: Dialog Box). (CVSS 8.2, Oracle Complex Maintenance, Repair, and Overhaul)
- [CVE-2021-2105](https://cve.now/CVE-2021-2105.md): Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). (CVSS 8.2, Oracle Customer Interaction History)
- [CVE-2021-2106](https://cve.now/CVE-2021-2106.md): Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). (CVSS 8.2, Oracle Customer Interaction History)
- [CVE-2021-2107](https://cve.now/CVE-2021-2107.md): Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). (CVSS 8.2, Oracle Customer Interaction History)
- [CVE-2021-2108](https://cve.now/CVE-2021-2108.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2021-2109](https://cve.now/CVE-2021-2109.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 7.2, Oracle WebLogic Server)
- [CVE-2021-2110](https://cve.now/CVE-2021-2110.md): Vulnerability in the Oracle Argus Safety product of Oracle Health Sciences Applications (component: Letters). (CVSS 5.0, Oracle Argus Safety)
- [CVE-2021-2092](https://cve.now/CVE-2021-2092.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 8.2, Oracle CRM Technical Foundation)
- [CVE-2021-2093](https://cve.now/CVE-2021-2093.md): Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). (CVSS 8.2, Oracle Common Applications)
- [CVE-2021-2094](https://cve.now/CVE-2021-2094.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 8.2, Oracle One-to-One Fulfillment)
- [CVE-2021-2096](https://cve.now/CVE-2021-2096.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 8.2, Oracle iStore)
- [CVE-2021-2097](https://cve.now/CVE-2021-2097.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Profile). (CVSS 8.2, Oracle iSupport)
- [CVE-2021-2098](https://cve.now/CVE-2021-2098.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). (CVSS 8.2, Oracle Email Center)
- [CVE-2021-2099](https://cve.now/CVE-2021-2099.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 8.2, Oracle CRM Technical Foundation)
- [CVE-2021-2100](https://cve.now/CVE-2021-2100.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 9.1, Oracle One-to-One Fulfillment)
- [CVE-2021-2101](https://cve.now/CVE-2021-2101.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 9.1, Oracle One-to-One Fulfillment)
- [CVE-2021-2083](https://cve.now/CVE-2021-2083.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: User Responsibilities). (CVSS 8.2, Oracle iSupport)
- [CVE-2021-2084](https://cve.now/CVE-2021-2084.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 8.2, Oracle CRM Technical Foundation)
- [CVE-2021-2085](https://cve.now/CVE-2021-2085.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 8.2, Oracle CRM Technical Foundation)
- [CVE-2021-2086](https://cve.now/CVE-2021-2086.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2021-2087](https://cve.now/CVE-2021-2087.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2021-2088](https://cve.now/CVE-2021-2088.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2021-2089](https://cve.now/CVE-2021-2089.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Runtime Catalog). (CVSS 8.2, Oracle iStore)
- [CVE-2021-2090](https://cve.now/CVE-2021-2090.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). (CVSS 8.2, Oracle Email Center)
- [CVE-2021-2091](https://cve.now/CVE-2021-2091.md): Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous). (CVSS 8.2, Oracle Scripting)
- [CVE-2021-2074](https://cve.now/CVE-2021-2074.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2021-2075](https://cve.now/CVE-2021-2075.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2021-2076](https://cve.now/CVE-2021-2076.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2077](https://cve.now/CVE-2021-2077.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 8.2, Oracle iStore)
- [CVE-2021-2078](https://cve.now/CVE-2021-2078.md): Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet). (CVSS 8.2, Oracle Configurator)
- [CVE-2021-2079](https://cve.now/CVE-2021-2079.md): Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet). (CVSS 8.2, Oracle Configurator)
- [CVE-2021-2080](https://cve.now/CVE-2021-2080.md): Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet). (CVSS 8.2, Oracle Configurator)
- [CVE-2021-2081](https://cve.now/CVE-2021-2081.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2082](https://cve.now/CVE-2021-2082.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 8.2, Oracle iStore)
- [CVE-2021-2065](https://cve.now/CVE-2021-2065.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2066](https://cve.now/CVE-2021-2066.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 8.6, Oracle Outside In Technology)
- [CVE-2021-2067](https://cve.now/CVE-2021-2067.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 8.6, Oracle Outside In Technology)
- [CVE-2021-2068](https://cve.now/CVE-2021-2068.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 8.6, Oracle Outside In Technology)
- [CVE-2021-2069](https://cve.now/CVE-2021-2069.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 8.6, Oracle Outside In Technology)
- [CVE-2021-2070](https://cve.now/CVE-2021-2070.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2071](https://cve.now/CVE-2021-2071.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). (CVSS 8.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2021-2072](https://cve.now/CVE-2021-2072.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2073](https://cve.now/CVE-2021-2073.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 4.4, Oracle VM VirtualBox)
- [CVE-2021-2056](https://cve.now/CVE-2021-2056.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2021-2057](https://cve.now/CVE-2021-2057.md): Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Interna (CVSS 6.3, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2021-2058](https://cve.now/CVE-2021-2058.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2059](https://cve.now/CVE-2021-2059.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Web interface). (CVSS 5.3, Oracle iStore)
- [CVE-2021-2060](https://cve.now/CVE-2021-2060.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2061](https://cve.now/CVE-2021-2061.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2021-2062](https://cve.now/CVE-2021-2062.md): Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Web Server). (CVSS 7.6, Oracle BI Publisher)
- [CVE-2021-2063](https://cve.now/CVE-2021-2063.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 8.4, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2021-2064](https://cve.now/CVE-2021-2064.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2021-2046](https://cve.now/CVE-2021-2046.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). (CVSS 6.8, Oracle MySQL Server)
- [CVE-2021-2047](https://cve.now/CVE-2021-2047.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2021-2048](https://cve.now/CVE-2021-2048.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 5.0, Oracle MySQL Server)
- [CVE-2021-2049](https://cve.now/CVE-2021-2049.md): Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Administration). (CVSS 7.6, Oracle BI Publisher)
- [CVE-2021-2050](https://cve.now/CVE-2021-2050.md): Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). (CVSS 7.6, Oracle BI Publisher)
- [CVE-2021-2051](https://cve.now/CVE-2021-2051.md): Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). (CVSS 7.6, Oracle BI Publisher)
- [CVE-2021-2052](https://cve.now/CVE-2021-2052.md): Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). (CVSS 5.8, Oracle JD Edwards EnterpriseOne Orchestrator)
- [CVE-2021-2054](https://cve.now/CVE-2021-2054.md): Vulnerability in the RDBMS Sharding component of Oracle Database Server. (CVSS 7.2, Oracle Database - Enterprise Edition)
- [CVE-2021-2055](https://cve.now/CVE-2021-2055.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2036](https://cve.now/CVE-2021-2036.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2038](https://cve.now/CVE-2021-2038.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2021-2039](https://cve.now/CVE-2021-2039.md): Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Search). (CVSS 7.6, Oracle Siebel Core - Server Framework)
- [CVE-2021-2040](https://cve.now/CVE-2021-2040.md): Vulnerability in the Oracle Argus Safety product of Oracle Health Sciences Applications (component: Case Form, Local Affiliate Form). (CVSS 6.1, Oracle Argus Safety)
- [CVE-2021-2041](https://cve.now/CVE-2021-2041.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation). (CVSS 8.1, Oracle Business Intelligence Enterprise Edition)
- [CVE-2021-2042](https://cve.now/CVE-2021-2042.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 2.3, Oracle MySQL Server)
- [CVE-2021-2043](https://cve.now/CVE-2021-2043.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2021-2044](https://cve.now/CVE-2021-2044.md): Vulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft (component: Financial Sanctions). (CVSS 6.5, Oracle PeopleSoft Enterprise FIN Payables)
- [CVE-2021-2045](https://cve.now/CVE-2021-2045.md): Vulnerability in the Oracle Text component of Oracle Database Server. (CVSS 3.1, Oracle Text)
- [CVE-2021-2027](https://cve.now/CVE-2021-2027.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2021-2028](https://cve.now/CVE-2021-2028.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2029](https://cve.now/CVE-2021-2029.md): Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous). (CVSS 9.8, Oracle Scripting)
- [CVE-2021-2030](https://cve.now/CVE-2021-2030.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2031](https://cve.now/CVE-2021-2031.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2032](https://cve.now/CVE-2021-2032.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema). (CVSS 4.3, Oracle MySQL Server)
- [CVE-2021-2033](https://cve.now/CVE-2021-2033.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). (CVSS 4.3, Oracle WebLogic Server)
- [CVE-2021-2034](https://cve.now/CVE-2021-2034.md): Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Tasks). (CVSS 8.2, Oracle Common Applications Calendar)
- [CVE-2021-2035](https://cve.now/CVE-2021-2035.md): Vulnerability in the RDBMS Scheduler component of Oracle Database Server. (CVSS 8.8, Oracle Database - Enterprise Edition)
- [CVE-2021-2018](https://cve.now/CVE-2021-2018.md): Vulnerability in the Advanced Networking Option component of Oracle Database Server. (CVSS 8.3, Oracle Advanced Networking Option)
- [CVE-2021-2019](https://cve.now/CVE-2021-2019.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 2.7, Oracle MySQL Server)
- [CVE-2021-2020](https://cve.now/CVE-2021-2020.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2021-2021](https://cve.now/CVE-2021-2021.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2022](https://cve.now/CVE-2021-2022.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2021-2023](https://cve.now/CVE-2021-2023.md): Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). (CVSS 4.7, Oracle Installed Base)
- [CVE-2021-2024](https://cve.now/CVE-2021-2024.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2021-2025](https://cve.now/CVE-2021-2025.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General). (CVSS 8.2, Oracle Business Intelligence Enterprise Edition)
- [CVE-2021-2026](https://cve.now/CVE-2021-2026.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2021-2009](https://cve.now/CVE-2021-2009.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2010](https://cve.now/CVE-2021-2010.md): Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). (CVSS 4.2, Oracle MySQL Server)
- [CVE-2021-2011](https://cve.now/CVE-2021-2011.md): Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). (CVSS 5.9, Oracle MySQL Server)
- [CVE-2021-2012](https://cve.now/CVE-2021-2012.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2013](https://cve.now/CVE-2021-2013.md): Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). (CVSS 7.6, Oracle BI Publisher)
- [CVE-2021-2014](https://cve.now/CVE-2021-2014.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2015](https://cve.now/CVE-2021-2015.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). (CVSS 8.2, Oracle Workflow)
- [CVE-2021-2016](https://cve.now/CVE-2021-2016.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2017](https://cve.now/CVE-2021-2017.md): Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). (CVSS 4.3, Oracle User Management)
- [CVE-2021-1999](https://cve.now/CVE-2021-1999.md): Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: RAS subsystems). (CVSS 5.0, Oracle Sun ZFS Storage Appliance Kit (AK) Software)
- [CVE-2021-2000](https://cve.now/CVE-2021-2000.md): Vulnerability in the Unified Audit component of Oracle Database Server. (CVSS 2.4, Oracle Database - Enterprise Edition)
- [CVE-2021-2001](https://cve.now/CVE-2021-2001.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2002](https://cve.now/CVE-2021-2002.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2003](https://cve.now/CVE-2021-2003.md): Vulnerability in the Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web Dashboards). (CVSS 5.4, Oracle Business Intelligence Enterprise Edition)
- [CVE-2021-2004](https://cve.now/CVE-2021-2004.md): Vulnerability in the Siebel Core - Server BizLogic Script product of Oracle Siebel CRM (component: Integration - Scripting). (CVSS 4.3, Oracle Siebel Core - Server Framework)
- [CVE-2021-2005](https://cve.now/CVE-2021-2005.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security). (CVSS 4.7, Oracle Business Intelligence Enterprise Edition)
- [CVE-2021-2006](https://cve.now/CVE-2021-2006.md): Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). (CVSS 5.3, Oracle MySQL Server)
- [CVE-2021-2007](https://cve.now/CVE-2021-2007.md): Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). (CVSS 3.7, Oracle MySQL Server)
- [CVE-2021-1993](https://cve.now/CVE-2021-1993.md): Vulnerability in the Java VM component of Oracle Database Server. (CVSS 4.8, Oracle Database - Enterprise Edition)
- [CVE-2021-1994](https://cve.now/CVE-2021-1994.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2021-1995](https://cve.now/CVE-2021-1995.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). (CVSS 6.5, Oracle WebLogic Server)
- [CVE-2021-1996](https://cve.now/CVE-2021-1996.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). (CVSS 2.4, Oracle WebLogic Server)
- [CVE-2021-1997](https://cve.now/CVE-2021-1997.md): Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Report). (CVSS 8.1, Oracle Hospitality Reporting and Analytics)
- [CVE-2021-1998](https://cve.now/CVE-2021-1998.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 3.8, Oracle MySQL Server)
- [CVE-2020-14756](https://cve.now/CVE-2020-14756.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components). (CVSS 9.8, Oracle Utilities Framework)
- [CVE-2021-23326](https://cve.now/CVE-2021-23326.md): Command Injection (CVSS 6.3, @graphql-tools/git-loader)
- [CVE-2020-35217](https://cve.now/CVE-2020-35217.md): Vert.x-Web framework v4.0 milestone 1-4 does not perform a correct CSRF verification. (no CVSS, io.vertx:vertx-web)
- [CVE-2021-3110](https://cve.now/CVE-2021-3110.md): The store system in PrestaShop 1.7.7.0 allows time-based boolean SQL injection via the module=productcomments controller=CommentGrade id\_pro (no CVSS)
- [CVE-2021-3137](https://cve.now/CVE-2021-3137.md): XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section. (no CVSS, org.xwiki.commons:xwiki-commons)
- [CVE-2020-27851](https://cve.now/CVE-2020-27851.md): Multiple stored HTML injection vulnerabilities in the "poll" and "quiz" features in an additional paid add-on of Rocketgenius Gravity Forms (no CVSS, wp-premium/gravityforms)
- [CVE-2020-27852](https://cve.now/CVE-2020-27852.md): A stored Cross-Site Scripting (XSS) vulnerability in the survey feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackers (no CVSS, wp-premium/gravityforms)
- [CVE-2020-27850](https://cve.now/CVE-2020-27850.md): A stored Cross-Site Scripting (XSS) vulnerability in forms import feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attacker (no CVSS, wp-premium/gravityforms)
- [CVE-2020-13133](https://cve.now/CVE-2020-13133.md): Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. (no CVSS)
- [CVE-2020-13134](https://cve.now/CVE-2020-13134.md): Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. (no CVSS)
- [CVE-2020-25385](https://cve.now/CVE-2020-25385.md): Nagios Log Server 2.1.7 contains a cross-site scripting (XSS) vulnerability in /nagioslogserver/configure/create\_snapshot through the snapsh (no CVSS)
- [CVE-2020-19364](https://cve.now/CVE-2020-19364.md): OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious PHP scripts through /controller.php. (no CVSS)
- [CVE-2020-19363](https://cve.now/CVE-2020-19363.md): Vtiger CRM v7.2.0 allows an attacker to display hidden files, list directories by using /libraries and /layout directories. (no CVSS)
- [CVE-2020-19362](https://cve.now/CVE-2020-19362.md): Reflected XSS in Vtiger CRM v7.2.0 in vtigercrm/index.php? through the view parameter can result in an attacker performing malicious actions (no CVSS)
- [CVE-2020-19361](https://cve.now/CVE-2020-19361.md): Reflected XSS in Medintux v2.16.000 CCAM.php by manipulating the mot1 parameter can result in an attacker performing malicious actions to us (no CVSS)
- [CVE-2020-19360](https://cve.now/CVE-2020-19360.md): Local file inclusion in FHEM 6.0 allows in fhem/FileLog\_logWrapper file parameter can allow an attacker to include a file, which can lead to (no CVSS)
- [CVE-2020-25685](https://cve.now/CVE-2020-25685.md): A flaw was found in dnsmasq before version 2.83. (no CVSS, dnsmasq)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-01-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.