CVEs published April 22, 2021
296 CVEs were published on April 22, 2021: 17 critical, 121 high.
- Published
- 296
- Critical
- 17
- High
- 121
- Medium
- 101
- Low
- 12
- Unrated
- 45
- Now in CISA KEV
- 0
- Fix available
- 93
Most affected products
- Juniper Networks Junos OS
- 48
- Oracle MySQL Server
- 39
- Oracle VM VirtualBox
- 20
- Oracle iStore
- 11
- Oracle WebLogic Server
- 7
- Oracle Cloud Infrastructure
- 6
- Oracle Database - Enterprise Edition
- 5
- Oracle PeopleSoft Enterprise PT PeopleTools
- 4
- Siemens APOGEE PXC Compact · Siemens APOGEE PXC Modular +6
- 4
- Juniper Networks Junos OS Evolved
- 3
Critical 17
- CVE-2021-2317Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console).Oracle Cloud Infrastructure
- CVE-2021-2318Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console).Oracle Cloud Infrastructure
- CVE-2021-2319Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console).Oracle Cloud Infrastructure
- CVE-2021-2320Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console).Oracle Cloud Infrastructure
- CVE-2021-2302Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: OPSS).Oracle Platform Security for Java
- CVE-2021-2253Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle Supply Chain (component: Core).Oracle Advanced Supply Chain Planning
- CVE-2021-2256Vulnerability in the Oracle Storage Cloud Software Appliance product of Oracle Storage Gateway (component: Management Console).Oracle Cloud Infrastructure
- CVE-2021-2244Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion (component: JAPI) and Essbase Analytic Provider ServicesOracle Hyperion Analytic Provider Services
- CVE-2021-2248Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server).Oracle Secure Global Desktop
- CVE-2021-2221Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client).Oracle Secure Global Desktop
- CVE-2021-2205Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2021-2200Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Home page).Oracle Applications Framework
- CVE-2021-2177Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Gateway).Oracle Secure Global Desktop
- CVE-2021-2135Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container).Oracle WebLogic Server
- CVE-2021-2136Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2021-0254Junos OS: Remote code execution vulnerability in overlayd serviceJuniper Networks Junos OS
- CVE-2021-0248NFX Series: Hard-coded credentials allow an attacker to take control of any instance through administrative interfaces.Juniper Networks Junos OS
High 121
- CVE-2021-2309Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2310Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2314Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Profiles).Oracle Application Object Library
- CVE-2021-2316Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR).Oracle HRMS
- CVE-2021-2290Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management).Oracle Engineering
- CVE-2021-2292Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Document Management).Oracle Document Management and Collaboration
- CVE-2021-2295Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration).Oracle Concurrent Processing
- CVE-2021-2280Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2281Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2282Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2283Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2284Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2285Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2286Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2287Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2288Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Bill Issues).Oracle Bills of Material
- CVE-2021-2289Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Template, GTIN search).Oracle Product Hub
- CVE-2021-2271Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Resource Exceptions).Oracle Work in Process
- CVE-2021-2272Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite (component: Inquiries).Oracle Subledger Accounting
- CVE-2021-2273Vulnerability in the Oracle Legal Entity Configurator product of Oracle E-Business Suite (component: Create Contracts).Oracle Legal Entity Configurator
- CVE-2021-2274Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: User Interface).Oracle E-Business Tax
- CVE-2021-2276Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports).Oracle iSetup
- CVE-2021-2277Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2021-2279Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2261Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Quotes).Oracle Lease and Finance Management
- CVE-2021-2262Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Endeca).Oracle Purchasing
- CVE-2021-2263Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Intelligence, RFx).Oracle Sourcing
- CVE-2021-2264Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2267Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: User Interface).Oracle Labor Distribution
- CVE-2021-2268Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: Courseware).Oracle Quoting
- CVE-2021-2269Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Price Book).Oracle Advanced Pricing
- CVE-2021-2270Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Sites).Oracle Site Hub
- CVE-2021-2252Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Loan Details, Loan Accounting Events).Oracle Loans
- CVE-2021-2254Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Hold Management).Oracle Project Contracts
- CVE-2021-2255Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Authoring).Oracle Service Contracts
- CVE-2021-2258Vulnerability in the Oracle Projects product of Oracle E-Business Suite (component: User Interface).Oracle Projects
- CVE-2021-2259Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: India Localization, Results).Oracle Payroll
- CVE-2021-2260Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: iRecruitment).Oracle Human Resources
- CVE-2021-2242Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2021-2246Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration).Oracle Universal Work Queue
- CVE-2021-2247Vulnerability in the Oracle Advanced Collections product of Oracle E-Business Suite (component: Admin).Oracle Advanced Collections
- CVE-2021-2249Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Shipment Workbench).Oracle Landed Cost Management
- CVE-2021-2250Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2251Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Data Source).Oracle CRM Technical Foundation
- CVE-2021-2233Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Setup).Oracle Enterprise Asset Management
- CVE-2021-2235Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Install and Upgrade).Oracle Transportation Execution
- CVE-2021-2236Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Advanced Global Intercompany).Oracle Financials Common Modules
- CVE-2021-2237Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Account Hierarchy Manager).Oracle General Ledger
- CVE-2021-2238Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Process Operations).Oracle MES for Process Manufacturing
- CVE-2021-2239Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Timecard).Oracle Time and Labor
- CVE-2021-2240Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2021-2241Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2021-2224Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Workbench).Oracle Compensation Workbench
- CVE-2021-2225Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups).Oracle E-Business Intelligence
- CVE-2021-2227Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite (component: Bank Account Transfer).Oracle Cash Management
- CVE-2021-2228Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite (component: User Interface).Oracle Incentive Compensation
- CVE-2021-2229Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: LOVs).Oracle Depot Repair
- CVE-2021-2231Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs).Oracle Installed Base
- CVE-2021-2218Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Health Center).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2021-2219Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2021-2222Vulnerability in the Oracle Bill Presentment Architecture product of Oracle E-Business Suite (component: Template Search).Oracle Bill Presentment Architecture
- CVE-2021-2223Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Receipts).Oracle Receivables
- CVE-2021-2206Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes).Oracle Trade Management
- CVE-2021-2209Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display).Oracle Email Center
- CVE-2021-2210Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes).Oracle Trade Management
- CVE-2021-2197Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2021-2198Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Setup, Admin).Oracle Knowledge Management
- CVE-2021-2199Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2021-2187Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2021-2188Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2021-2189Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Template).Oracle Sales Offline
- CVE-2021-2190Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Template).Oracle Sales Offline
- CVE-2021-2195Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Attribute Admin Setup).Oracle Partner Management
- CVE-2021-2181Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments).Oracle Document Management and Collaboration
- CVE-2021-2182Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2021-2183Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2021-2184Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2021-2185Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2021-2186Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2021-2167Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment).Oracle Solaris Operating System
- CVE-2021-2157Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: TopLink Integration).Oracle TopLink
- CVE-2021-2150Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2021-2156Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Customer Tab).Oracle Customers Online
- CVE-2021-2144Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser).Oracle MySQL Server
- CVE-2021-2145Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2008Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin).Oracle Enterprise Manager for Fusion Middleware
- CVE-2021-25663A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions Siemens Capital Embedded AR Classic 431-422 · Siemens Ca… +3
- CVE-2021-25664A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions Siemens Capital Embedded AR Classic 431-422 · Siemens Ca… +3
- CVE-2020-15795A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions <Siemens APOGEE PXC Compact · Siemens APOGEE PXC Modular +4
- CVE-2020-25244A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4).Siemens LOGO! Soft Comfort
- CVE-2020-27009A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions <Siemens APOGEE PXC Compact · Siemens APOGEE PXC Modular +4
- CVE-2021-0275Junos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session.Juniper Networks Junos OS
- CVE-2021-0270Junos OS: PTX Series, QFX10K Series: A PTX/QFX FPC may restart unexpectedly with the "inline-Jflow" feature enabled on a large-scale deploymentJuniper Networks Junos OS
- CVE-2021-0269Junos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution attacks.Juniper Networks Junos OS
- CVE-2021-0268Junos OS: J-Web has an Improper Neutralization of CRLF Sequences in its HTTP Headers which allows an attacker to carry out multiple types of attacks.Juniper Networks Junos OS
- CVE-2021-0267Junos OS: Receipt of a crafted DHCP packet will cause the jdhcpd DHCP service to core.Juniper Networks Junos OS
- CVE-2021-0266cSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.Juniper Networks Junos OS
- CVE-2021-0265Contrail Insights: The REST API implementation allows an unauthenticated remote attacker to execute commands as root.Juniper Networks Contrail Insights
- CVE-2021-0261Junos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requestsJuniper Networks Junos OS
- CVE-2021-0260Junos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests.Juniper Networks Junos OS
- CVE-2021-0259Junos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenarioJuniper Networks Junos OS
- CVE-2021-0253Junos OS: NFX Series: Local Command Execution Vulnerability in JDMD Leads to Privilege EscalationJuniper Networks Junos OS
- CVE-2021-0252Junos OS: NFX Series: Local Code Execution Vulnerability in JDMD Leads to Privilege EscalationJuniper Networks Junos OS
- CVE-2021-0251Junos OS: MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC: The BRAS Subscriber Services service activation portal is vulnerable to a Denial of Service (DoS) via malformed HTTP packetsJuniper Networks Junos OS
- CVE-2021-0250Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPDJuniper Networks Junos OS
- CVE-2021-0249Junos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.Juniper Networks Junos OS
- CVE-2021-0246Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3: In a multi-tenant environment, a tenant host administrator may be able to jailbreak out of their network impacting other tenant networks or gather information from other networks.Juniper Networks Junos OS
- CVE-2021-0245Junos OS: Junos Fusion: Hard-coded credentials on satellite devices allows a locally authenticated attacker to elevate their privileges.Juniper Networks Junos OS
- CVE-2021-0244Junos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service conditionJuniper Networks Junos OS
- CVE-2021-0241Junos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restartJuniper Networks Junos OS
- CVE-2021-0240Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart.Juniper Networks Junos OS
- CVE-2021-0235Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series: In a multi-tenant environment, a tenant host administrator may configure logical firewall isolation affecting other tenant networksJuniper Networks Junos OS
- CVE-2021-0233Junos OS: ACX500 Series, ACX4000 Series: Denial of Service due to FFEB crash while processing high rate of specific packets.Juniper Networks Junos OS
- CVE-2021-0232Paragon Active Assurance: Authentication bypass vulnerability in Control CenterJuniper Networks Paragon Active Assurance
- CVE-2021-0230Junos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statisticsJuniper Networks Junos OS
- CVE-2021-0227Junos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packetsJuniper Networks Junos OS
- CVE-2021-0226Junos OS Evolved: The IPv6 BGP session will flap due to receipt of a specific IPv6 packetJuniper Networks Junos OS Evolved
- CVE-2021-27278This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141.Parallels Desktop
- CVE-2021-27277This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Orion Virtual Infrastructure MonitoSolarWinds Orion Virtual Infrastructure Monitor
- CVE-2020-7861AnySupport directory traversing vulnerabilityKoino AquaNPlayer
- CVE-2021-29465Remote file overwrite on discord-recon can result in DoS and Remote Code ExecutionDEMON1A Discord-Recon
Medium, low and unrated 158
- CVE-2021-31597The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when thexmlhttprequest-ssl
- CVE-2021-22199An issue has been discovered in GitLab affecting all versions starting with 12.9.GitLab
- CVE-2021-2307Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging).Oracle MySQL Server
- CVE-2021-2308Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).Oracle MySQL Server
- CVE-2021-2311Vulnerability in the Oracle Hospitality Inventory Management product of Oracle Food and Beverage Applications (component: Export to ReportinOracle Hospitality Inventory Management
- CVE-2021-2312Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2315Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener).Oracle HTTP Server
- CVE-2021-2298Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2299Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2300Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2021-2301Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).Oracle MySQL Server
- CVE-2021-2303Vulnerability in the OSS Support Tools product of Oracle Support Tools (component: Diagnostic Assistant).Oracle OSS Support Tools
- CVE-2021-2304Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).Oracle MySQL Server
- CVE-2021-2305Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2021-2306Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2291Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2293Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).Oracle MySQL Server
- CVE-2021-2294Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2021-2296Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2297Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2275Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports).Oracle Applications Manager
- CVE-2021-2278Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2266Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2257Vulnerability in the Oracle Storage Cloud Software Appliance product of Oracle Storage Gateway (component: Management Console).Oracle Cloud Infrastructure
- CVE-2021-2245Vulnerability in the Oracle Database - Enterprise Edition Unified Audit component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2021-2234Vulnerability in the Java VM component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2021-2226Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).Oracle MySQL Server
- CVE-2021-2230Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2232Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin).Oracle MySQL Server
- CVE-2021-2214Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2021-2215Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).Oracle MySQL Server
- CVE-2021-2216Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Multichannel Framework).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2021-2217Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).Oracle MySQL Server
- CVE-2021-2220Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft (component: Manage Requisition Status).Oracle PeopleSoft Enterprise SCM eProcurement
- CVE-2021-2208Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition).Oracle MySQL Server
- CVE-2021-2211Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services).Oracle WebLogic Server
- CVE-2021-2212Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2213Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2196Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2021-2201Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition).Oracle MySQL Server
- CVE-2021-2202Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server
- CVE-2021-2203Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2204Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2021-2191Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions).Oracle Business Intelligence Enterprise Edition
- CVE-2021-2192Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).Oracle Solaris Operating System
- CVE-2021-2193Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2194Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2021-2178Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server
- CVE-2021-2179Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin).Oracle MySQL Server
- CVE-2021-2180Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2021-2169Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2170Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2171Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server
- CVE-2021-2172Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2021-2174Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2021-2158Vulnerability in the Hyperion Financial Management product of Oracle Hyperion (component: Task Automation).Oracle Hyperion Financial Management
- CVE-2021-2159Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Frameworks).Oracle PeopleSoft Enterprise CS Campus Community
- CVE-2021-2160Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2161Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).Oracle Java SE JDK and JRE
- CVE-2021-2162Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in).Oracle MySQL Server
- CVE-2021-2163Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).Oracle Java SE JDK and JRE
- CVE-2021-2164Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2166Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2021-2147Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Installation).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2021-2149Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2021-2151Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2021-2152Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General).Oracle Business Intelligence Enterprise Edition
- CVE-2021-2153Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses).Oracle Internet Expenses
- CVE-2021-2154Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2021-2155Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).Oracle One-to-One Fulfillment
- CVE-2021-2134Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin).Oracle Enterprise Manager for Fusion Middleware
- CVE-2021-2140Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (comOracle Financial Services Analytical Applications Infrastru…
- CVE-2021-2141Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Login).Oracle FLEXCUBE Direct Banking
- CVE-2021-2142Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2021-2146Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options).Oracle MySQL Server
- CVE-2021-2053Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework).Oracle Enterprise Manager Base Platform
- CVE-2021-28648Trend Micro Antivirus for Mac 2020 v10.5 and 2021 v11 (Consumer) is vulnerable to an improper access control privilege escalation vulnerabilTrend Micro Antivirus for Mac
- CVE-2020-17564Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the " Admin/DataActi
- CVE-2020-17563Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to " /index.php?s=/admi
- CVE-2021-24238Realteo < 1.2.4 - Arbitrary Property Deletion via IDORPureThemes Realteo · PureThemes Findeo
- CVE-2021-24239Pie Register < 3.7.0.1 - Reflected Cross-Site Scripting (XSS)Pie Register – User Registration Forms. Invitation based re…
- CVE-2021-24240Business Hours Pro <= 5.5.0 - Unauthenticated Arbitrary File Upload to RCEBusiness Hours Pro
- CVE-2021-24241Advanced Custom Field Pro < 5.9.1 - Reflected Cross-Site Scripting (XSS)Advanced Custom Fields Pro
- CVE-2021-24242Tutor LMS < 1.8.8 - Authenticated Local File InclusionThemeum Tutor LMS – eLearning and online course solution
- CVE-2021-24232Advanced Booking Calendar < 1.6.8 - Authenticated Reflected Cross-Site Scripting (XSS)Advanced Booking Calendar
- CVE-2021-24233Cooked Pro < 1.7.5.6 - Unauthenticated Reflected Cross Site Scripting (XSS)Cooked Ppro
- CVE-2021-24234Ivory Search < 4.6.1 - Reflected Cross Site Scripting (XSS)Ivory Search – WordPress Search Plugin
- CVE-2021-24235Goto - Tour & Travel < 2.0 - Unauthenticated Reflected XSSGoto
- CVE-2021-24237Realteo < 1.2.4 - Unauthenticated Reflected Cross-Site Scripting (XSS)PureThemes Realteo · PureThemes Findeo
- CVE-2021-25670A vulnerability has been identified in Tecnomatix RobotExpert (All versions < V16.1).Siemens Tecnomatix RobotExpert
- CVE-2021-25677A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions <Siemens APOGEE PXC Compact · Siemens APOGEE PXC Modular +6
- CVE-2021-25678A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid ESiemens Solid Edge SE2020 · Siemens Solid Edge SE2021
- CVE-2021-27382A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid ESiemens Solid Edge SE2020 · Siemens Solid Edge SE2021
- CVE-2021-27389A vulnerability has been identified in Opcenter Quality (All versions < V12.2), QMS Automotive (All versions < V12.30).Siemens Opcenter Quality · Siemens QMS Automotive
- CVE-2021-27392A vulnerability has been identified in Siveillance Video Open Network Bridge (2020 R3), Siveillance Video Open Network Bridge (2020 R2), SivSiemens Siveillance Video Open Network Bridge
- CVE-2021-27393A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (VerSiemens Nucleus NET · Siemens Nucleus ReadyStart +1
- CVE-2020-27738A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions <Siemens APOGEE PXC Compact · Siemens APOGEE PXC Modular +6
- CVE-2021-25668A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X2Siemens SCALANCE X200-4P IRT · Siemens SCALANCE X201-3P… +22
- CVE-2021-25669A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X2Siemens SCALANCE X200-4P IRT · Siemens SCALANCE X201-3P… +22
- CVE-2020-25243A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4).Siemens LOGO! Soft Comfort
- CVE-2020-26997A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid ESiemens Solid Edge SE2020 · Siemens Solid Edge SE2021
- CVE-2020-27736A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions <Siemens APOGEE PXC Compact · Siemens APOGEE PXC Modular +6
- CVE-2020-27737A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions <Siemens APOGEE PXC Compact · Siemens APOGEE PXC Modular +6
- CVE-2021-0273Junos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device's interfaces.Juniper Networks Junos OS
- CVE-2021-0272Junos OS: QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: In EVPN-VXLAN scenarios receipt of specific genuine packets by an adjacent attacker will cause a kernel memory leak in FPC.Juniper Networks Junos OS
- CVE-2021-0271Junos OS: EX2200-C Series, EX3200 Series, EX3300 Series, EX4200 Series, EX4500 Series, EX4550 Series, EX6210 Series, EX8208 Series, EX8216 Series: Receipt of a crafted ARP packet by an adjacent attacker will cause the sfid process to core.Juniper Networks Junos OS
- CVE-2021-0264Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configuredJuniper Networks Junos OS
- CVE-2021-0263Junos OS: PTX Series: Denial of Service in packet processing due to heavy route churn when J-Flow sampling is enabledJuniper Networks Junos OS
- CVE-2021-0262Junos OS: QFX10002-60C: Use after free vulnerability found during static code analysisJuniper Networks Junos OS
- CVE-2021-0258Junos OS: Kernel panic upon receipt of specific TCPv6 packet on management interfaceJuniper Networks Junos OS
- CVE-2021-0257Junos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interfaceJuniper Networks Junos OS
- CVE-2021-0256Junos OS: mosquitto Local Privilege Escalation vulnerability in SUID binariesJuniper Networks Junos OS
- CVE-2021-0255Junos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binariesJuniper Networks Junos OS
- CVE-2021-0247Junos OS: PTX Series, QFX Series: Due to a race condition input loopback firewall filters applied to interfaces may not operate even when listed in the running configuration.Juniper Networks Junos OS
- CVE-2021-0243Junos OS: EX4300: Stateless firewall policer fails to discard trafficJuniper Networks Junos OS
- CVE-2021-0242Junos OS: EX4300: FPC crash upon receipt of specific frames on an interface without L2PT or dot1x configuredJuniper Networks Junos OS
- CVE-2021-0239Junos OS Evolved: Denial of Service due to receipt of specific genuine layer 2 frames.Juniper Networks Junos OS Evolved
- CVE-2021-0238Junos OS: MX Series: Executing CLI command repetitively may cause the system to run out of disk spaceJuniper Networks Junos OS
- CVE-2021-0237Junos OS: EX4300-MP/EX4600/EX4650/QFX5K Series: Packet Forwarding Engine manager (FXPC) process crashes when deployed in a Virtual Chassis (VC) configurationJuniper Networks Junos OS
- CVE-2021-0236Junos OS: A specific BGP VPNv6 flowspec message causes routing protocol daemon (rpd) process to crash with a core.Juniper Networks Junos OS
- CVE-2021-0234Junos OS: QFX5100-96S: DDoS protection does not work as expected.Juniper Networks Junos OS
- CVE-2021-0231Junos OS: SRX, vSRX Series: J-Web Path traversal vulnerability in SRX and vSRX Series leads to information disclosure.Juniper Networks Junos OS
- CVE-2021-0229Junos OS: Receipt of specific packets could lead to Denial of Service in MQTT ServerJuniper Networks Junos OS
- CVE-2021-0228Junos OS: MX Series: DDoS LACP violation upon receipt of specific layer 2 frames in EVPN-VXLAN deploymentJuniper Networks Junos OS
- CVE-2021-0225Junos OS Evolved: Stateless IP firewall filter does not work as expectedJuniper Networks Junos OS Evolved
- CVE-2021-0224Junos OS: ANCPD core when hitting maximum-discovery-table-entries limitJuniper Networks Junos OS
- CVE-2021-0216Junos OS: ACX5448, ACX710: BFD sessions might flap due to high rate of transit ARP packetsJuniper Networks Junos OS
- CVE-2021-0214Junos OS: Denial of Service in ppmd upon receipt of malformed packetJuniper Networks Junos OS
- CVE-2021-20590Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC seGOT2000 series GT27 model · GOT2000 series GT25 model +4
- CVE-2021-23133Linux Kernel sctp_destroy_sock race conditionLinux Kernel
- CVE-2020-7858AquaNPlayer directory traversing vulnerabilitycdnetworks AquaNPlayer
- CVE-2021-31572The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in stream_buffer.c for a stream buffer.
- CVE-2021-31571The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in queue.c for queue creation.
- CVE-2021-30356A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to Check Point Identity Agent
- CVE-2021-28168Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability.The Eclipse Foundation Eclipse Jersey · org.glassfish.jerse…
- CVE-2021-27400HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certif
- CVE-2021-29653HashiCorp Vault and Vault Enterprise 1.5.1 and newer, under certain circumstances, may exclude revoked but unexpired certificates from the C
- CVE-2021-30476HashiCorp Terraform’s Vault Provider (terraform-provider-vault) did not correctly configure GCE-type bound labels for Vault’s GCP auth metho
- CVE-2021-22540XSS in Dart SDKGoogle Dart SDK
- CVE-2021-27736FusionAuth fusionauth-samlv2 before 0.5.4 allows XXE attacks via a forged AuthnRequest or LogoutRequest because parseFromBytes uses javax.xm
- CVE-2021-3287Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization clas
- CVE-2021-31545An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2.
- CVE-2021-31546An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2.
- CVE-2021-31547An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2.
- CVE-2021-31548An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2.
- CVE-2021-31549An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2.
- CVE-2021-31550An issue was discovered in the CommentBox extension for MediaWiki through 1.35.2.
- CVE-2021-31551An issue was discovered in the PageForms extension for MediaWiki through 1.35.2.
- CVE-2021-31552An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2.
- CVE-2021-31553An issue was discovered in the CheckUser extension for MediaWiki through 1.35.2.
- CVE-2021-31554An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2.
- CVE-2021-31555An issue was discovered in the Oauth extension for MediaWiki through 1.35.2.
- CVE-2021-29466Path Traversal at Discord-Recon .recon Command PathDEMON1A Discord-Recon
- CVE-2021-29467Self-XSSbirb-digital wrongthink
- CVE-2021-2173Vulnerability in the Recovery component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2021-2175Vulnerability in the Database Vault component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2021-2207Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2021-3496A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafted file.jhead