# CVEs published 2021-04-22

296 CVEs were published on April 22, 2021: 17 critical, 121 high. Days are UTC.

- [CVE-2021-31597](https://cve.now/CVE-2021-31597.md): The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the (no CVSS, xmlhttprequest-ssl)
- [CVE-2021-22199](https://cve.now/CVE-2021-22199.md): An issue has been discovered in GitLab affecting all versions starting with 12.9. (CVSS 3.5, GitLab)
- [CVE-2021-2317](https://cve.now/CVE-2021-2317.md): Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). (CVSS 10.0, Oracle Cloud Infrastructure)
- [CVE-2021-2318](https://cve.now/CVE-2021-2318.md): Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). (CVSS 9.1, Oracle Cloud Infrastructure)
- [CVE-2021-2319](https://cve.now/CVE-2021-2319.md): Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). (CVSS 9.1, Oracle Cloud Infrastructure)
- [CVE-2021-2320](https://cve.now/CVE-2021-2320.md): Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). (CVSS 9.1, Oracle Cloud Infrastructure)
- [CVE-2021-2307](https://cve.now/CVE-2021-2307.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging). (CVSS 6.1, Oracle MySQL Server)
- [CVE-2021-2308](https://cve.now/CVE-2021-2308.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). (CVSS 2.7, Oracle MySQL Server)
- [CVE-2021-2309](https://cve.now/CVE-2021-2309.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2021-2310](https://cve.now/CVE-2021-2310.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2021-2311](https://cve.now/CVE-2021-2311.md): Vulnerability in the Oracle Hospitality Inventory Management product of Oracle Food and Beverage Applications (component: Export to Reportin (CVSS 6.5, Oracle Hospitality Inventory Management)
- [CVE-2021-2312](https://cve.now/CVE-2021-2312.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 4.4, Oracle VM VirtualBox)
- [CVE-2021-2314](https://cve.now/CVE-2021-2314.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Profiles). (CVSS 8.1, Oracle Application Object Library)
- [CVE-2021-2315](https://cve.now/CVE-2021-2315.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). (CVSS 5.4, Oracle HTTP Server)
- [CVE-2021-2316](https://cve.now/CVE-2021-2316.md): Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR). (CVSS 8.1, Oracle HRMS)
- [CVE-2021-2298](https://cve.now/CVE-2021-2298.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2021-2299](https://cve.now/CVE-2021-2299.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2300](https://cve.now/CVE-2021-2300.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2301](https://cve.now/CVE-2021-2301.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). (CVSS 2.7, Oracle MySQL Server)
- [CVE-2021-2302](https://cve.now/CVE-2021-2302.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: OPSS). (CVSS 9.8, Oracle Platform Security for Java)
- [CVE-2021-2303](https://cve.now/CVE-2021-2303.md): Vulnerability in the OSS Support Tools product of Oracle Support Tools (component: Diagnostic Assistant). (CVSS 4.9, Oracle OSS Support Tools)
- [CVE-2021-2304](https://cve.now/CVE-2021-2304.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). (CVSS 5.5, Oracle MySQL Server)
- [CVE-2021-2305](https://cve.now/CVE-2021-2305.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2306](https://cve.now/CVE-2021-2306.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2021-2290](https://cve.now/CVE-2021-2290.md): Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). (CVSS 8.1, Oracle Engineering)
- [CVE-2021-2291](https://cve.now/CVE-2021-2291.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 4.7, Oracle VM VirtualBox)
- [CVE-2021-2292](https://cve.now/CVE-2021-2292.md): Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Document Management). (CVSS 8.1, Oracle Document Management and Collaboration)
- [CVE-2021-2293](https://cve.now/CVE-2021-2293.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2294](https://cve.now/CVE-2021-2294.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 6.5, Oracle WebLogic Server)
- [CVE-2021-2295](https://cve.now/CVE-2021-2295.md): Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). (CVSS 8.1, Oracle Concurrent Processing)
- [CVE-2021-2296](https://cve.now/CVE-2021-2296.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.3, Oracle VM VirtualBox)
- [CVE-2021-2297](https://cve.now/CVE-2021-2297.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.3, Oracle VM VirtualBox)
- [CVE-2021-2280](https://cve.now/CVE-2021-2280.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.1, Oracle VM VirtualBox)
- [CVE-2021-2281](https://cve.now/CVE-2021-2281.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.1, Oracle VM VirtualBox)
- [CVE-2021-2282](https://cve.now/CVE-2021-2282.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.1, Oracle VM VirtualBox)
- [CVE-2021-2283](https://cve.now/CVE-2021-2283.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.1, Oracle VM VirtualBox)
- [CVE-2021-2284](https://cve.now/CVE-2021-2284.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.1, Oracle VM VirtualBox)
- [CVE-2021-2285](https://cve.now/CVE-2021-2285.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.1, Oracle VM VirtualBox)
- [CVE-2021-2286](https://cve.now/CVE-2021-2286.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.1, Oracle VM VirtualBox)
- [CVE-2021-2287](https://cve.now/CVE-2021-2287.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.1, Oracle VM VirtualBox)
- [CVE-2021-2288](https://cve.now/CVE-2021-2288.md): Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Bill Issues). (CVSS 8.1, Oracle Bills of Material)
- [CVE-2021-2289](https://cve.now/CVE-2021-2289.md): Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Template, GTIN search). (CVSS 8.1, Oracle Product Hub)
- [CVE-2021-2271](https://cve.now/CVE-2021-2271.md): Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Resource Exceptions). (CVSS 8.1, Oracle Work in Process)
- [CVE-2021-2272](https://cve.now/CVE-2021-2272.md): Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite (component: Inquiries). (CVSS 8.1, Oracle Subledger Accounting)
- [CVE-2021-2273](https://cve.now/CVE-2021-2273.md): Vulnerability in the Oracle Legal Entity Configurator product of Oracle E-Business Suite (component: Create Contracts). (CVSS 8.1, Oracle Legal Entity Configurator)
- [CVE-2021-2274](https://cve.now/CVE-2021-2274.md): Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: User Interface). (CVSS 8.1, Oracle E-Business Tax)
- [CVE-2021-2275](https://cve.now/CVE-2021-2275.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). (CVSS 6.5, Oracle Applications Manager)
- [CVE-2021-2276](https://cve.now/CVE-2021-2276.md): Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). (CVSS 8.1, Oracle iSetup)
- [CVE-2021-2277](https://cve.now/CVE-2021-2277.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle Coherence)
- [CVE-2021-2278](https://cve.now/CVE-2021-2278.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2279](https://cve.now/CVE-2021-2279.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.1, Oracle VM VirtualBox)
- [CVE-2021-2261](https://cve.now/CVE-2021-2261.md): Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Quotes). (CVSS 8.1, Oracle Lease and Finance Management)
- [CVE-2021-2262](https://cve.now/CVE-2021-2262.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Endeca). (CVSS 8.1, Oracle Purchasing)
- [CVE-2021-2263](https://cve.now/CVE-2021-2263.md): Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Intelligence, RFx). (CVSS 8.1, Oracle Sourcing)
- [CVE-2021-2264](https://cve.now/CVE-2021-2264.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.4, Oracle VM VirtualBox)
- [CVE-2021-2266](https://cve.now/CVE-2021-2266.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2021-2267](https://cve.now/CVE-2021-2267.md): Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: User Interface). (CVSS 8.1, Oracle Labor Distribution)
- [CVE-2021-2268](https://cve.now/CVE-2021-2268.md): Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: Courseware). (CVSS 8.1, Oracle Quoting)
- [CVE-2021-2269](https://cve.now/CVE-2021-2269.md): Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Price Book). (CVSS 8.1, Oracle Advanced Pricing)
- [CVE-2021-2270](https://cve.now/CVE-2021-2270.md): Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Sites). (CVSS 8.1, Oracle Site Hub)
- [CVE-2021-2252](https://cve.now/CVE-2021-2252.md): Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Loan Details, Loan Accounting Events). (CVSS 8.1, Oracle Loans)
- [CVE-2021-2253](https://cve.now/CVE-2021-2253.md): Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle Supply Chain (component: Core). (CVSS 9.1, Oracle Advanced Supply Chain Planning)
- [CVE-2021-2254](https://cve.now/CVE-2021-2254.md): Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Hold Management). (CVSS 8.1, Oracle Project Contracts)
- [CVE-2021-2255](https://cve.now/CVE-2021-2255.md): Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Authoring). (CVSS 8.1, Oracle Service Contracts)
- [CVE-2021-2256](https://cve.now/CVE-2021-2256.md): Vulnerability in the Oracle Storage Cloud Software Appliance product of Oracle Storage Gateway (component: Management Console). (CVSS 10.0, Oracle Cloud Infrastructure)
- [CVE-2021-2257](https://cve.now/CVE-2021-2257.md): Vulnerability in the Oracle Storage Cloud Software Appliance product of Oracle Storage Gateway (component: Management Console). (CVSS 4.1, Oracle Cloud Infrastructure)
- [CVE-2021-2258](https://cve.now/CVE-2021-2258.md): Vulnerability in the Oracle Projects product of Oracle E-Business Suite (component: User Interface). (CVSS 8.1, Oracle Projects)
- [CVE-2021-2259](https://cve.now/CVE-2021-2259.md): Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: India Localization, Results). (CVSS 8.1, Oracle Payroll)
- [CVE-2021-2260](https://cve.now/CVE-2021-2260.md): Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: iRecruitment). (CVSS 8.1, Oracle Human Resources)
- [CVE-2021-2242](https://cve.now/CVE-2021-2242.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 8.2, Oracle Outside In Technology)
- [CVE-2021-2244](https://cve.now/CVE-2021-2244.md): Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion (component: JAPI) and Essbase Analytic Provider Services (CVSS 10.0, Oracle Hyperion Analytic Provider Services)
- [CVE-2021-2245](https://cve.now/CVE-2021-2245.md): Vulnerability in the Oracle Database - Enterprise Edition Unified Audit component of Oracle Database Server. (CVSS 2.7, Oracle Database - Enterprise Edition)
- [CVE-2021-2246](https://cve.now/CVE-2021-2246.md): Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). (CVSS 8.1, Oracle Universal Work Queue)
- [CVE-2021-2247](https://cve.now/CVE-2021-2247.md): Vulnerability in the Oracle Advanced Collections product of Oracle E-Business Suite (component: Admin). (CVSS 8.1, Oracle Advanced Collections)
- [CVE-2021-2248](https://cve.now/CVE-2021-2248.md): Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). (CVSS 10.0, Oracle Secure Global Desktop)
- [CVE-2021-2249](https://cve.now/CVE-2021-2249.md): Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Shipment Workbench). (CVSS 8.1, Oracle Landed Cost Management)
- [CVE-2021-2250](https://cve.now/CVE-2021-2250.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2021-2251](https://cve.now/CVE-2021-2251.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Data Source). (CVSS 8.1, Oracle CRM Technical Foundation)
- [CVE-2021-2233](https://cve.now/CVE-2021-2233.md): Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Setup). (CVSS 8.1, Oracle Enterprise Asset Management)
- [CVE-2021-2234](https://cve.now/CVE-2021-2234.md): Vulnerability in the Java VM component of Oracle Database Server. (CVSS 5.3, Oracle Database - Enterprise Edition)
- [CVE-2021-2235](https://cve.now/CVE-2021-2235.md): Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Install and Upgrade). (CVSS 8.1, Oracle Transportation Execution)
- [CVE-2021-2236](https://cve.now/CVE-2021-2236.md): Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Advanced Global Intercompany). (CVSS 8.1, Oracle Financials Common Modules)
- [CVE-2021-2237](https://cve.now/CVE-2021-2237.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Account Hierarchy Manager). (CVSS 8.1, Oracle General Ledger)
- [CVE-2021-2238](https://cve.now/CVE-2021-2238.md): Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Process Operations). (CVSS 8.1, Oracle MES for Process Manufacturing)
- [CVE-2021-2239](https://cve.now/CVE-2021-2239.md): Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Timecard). (CVSS 8.1, Oracle Time and Labor)
- [CVE-2021-2240](https://cve.now/CVE-2021-2240.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.3, Oracle Outside In Technology)
- [CVE-2021-2241](https://cve.now/CVE-2021-2241.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 8.1, Oracle iStore)
- [CVE-2021-2224](https://cve.now/CVE-2021-2224.md): Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Workbench). (CVSS 8.1, Oracle Compensation Workbench)
- [CVE-2021-2225](https://cve.now/CVE-2021-2225.md): Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups). (CVSS 8.1, Oracle E-Business Intelligence)
- [CVE-2021-2226](https://cve.now/CVE-2021-2226.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2227](https://cve.now/CVE-2021-2227.md): Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite (component: Bank Account Transfer). (CVSS 8.1, Oracle Cash Management)
- [CVE-2021-2228](https://cve.now/CVE-2021-2228.md): Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite (component: User Interface). (CVSS 8.1, Oracle Incentive Compensation)
- [CVE-2021-2229](https://cve.now/CVE-2021-2229.md): Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: LOVs). (CVSS 8.1, Oracle Depot Repair)
- [CVE-2021-2230](https://cve.now/CVE-2021-2230.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2231](https://cve.now/CVE-2021-2231.md): Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). (CVSS 8.1, Oracle Installed Base)
- [CVE-2021-2232](https://cve.now/CVE-2021-2232.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). (CVSS 1.9, Oracle MySQL Server)
- [CVE-2021-2214](https://cve.now/CVE-2021-2214.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 4.4, Oracle WebLogic Server)
- [CVE-2021-2215](https://cve.now/CVE-2021-2215.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2216](https://cve.now/CVE-2021-2216.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Multichannel Framework). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2021-2217](https://cve.now/CVE-2021-2217.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2218](https://cve.now/CVE-2021-2218.md): Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Health Center). (CVSS 8.3, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2021-2219](https://cve.now/CVE-2021-2219.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). (CVSS 7.4, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2021-2220](https://cve.now/CVE-2021-2220.md): Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft (component: Manage Requisition Status). (CVSS 5.4, Oracle PeopleSoft Enterprise SCM eProcurement)
- [CVE-2021-2221](https://cve.now/CVE-2021-2221.md): Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). (CVSS 9.6, Oracle Secure Global Desktop)
- [CVE-2021-2222](https://cve.now/CVE-2021-2222.md): Vulnerability in the Oracle Bill Presentment Architecture product of Oracle E-Business Suite (component: Template Search). (CVSS 8.1, Oracle Bill Presentment Architecture)
- [CVE-2021-2223](https://cve.now/CVE-2021-2223.md): Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Receipts). (CVSS 8.1, Oracle Receivables)
- [CVE-2021-2205](https://cve.now/CVE-2021-2205.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 9.1, Oracle Marketing)
- [CVE-2021-2206](https://cve.now/CVE-2021-2206.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). (CVSS 8.2, Oracle Trade Management)
- [CVE-2021-2208](https://cve.now/CVE-2021-2208.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2209](https://cve.now/CVE-2021-2209.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). (CVSS 8.5, Oracle Email Center)
- [CVE-2021-2210](https://cve.now/CVE-2021-2210.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). (CVSS 8.2, Oracle Trade Management)
- [CVE-2021-2211](https://cve.now/CVE-2021-2211.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). (CVSS 5.9, Oracle WebLogic Server)
- [CVE-2021-2212](https://cve.now/CVE-2021-2212.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2213](https://cve.now/CVE-2021-2213.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2196](https://cve.now/CVE-2021-2196.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2197](https://cve.now/CVE-2021-2197.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 8.2, Oracle iStore)
- [CVE-2021-2198](https://cve.now/CVE-2021-2198.md): Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Setup, Admin). (CVSS 8.2, Oracle Knowledge Management)
- [CVE-2021-2199](https://cve.now/CVE-2021-2199.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 8.2, Oracle iStore)
- [CVE-2021-2200](https://cve.now/CVE-2021-2200.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Home page). (CVSS 9.1, Oracle Applications Framework)
- [CVE-2021-2201](https://cve.now/CVE-2021-2201.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2202](https://cve.now/CVE-2021-2202.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2021-2203](https://cve.now/CVE-2021-2203.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2204](https://cve.now/CVE-2021-2204.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 5.3, Oracle WebLogic Server)
- [CVE-2021-2187](https://cve.now/CVE-2021-2187.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 8.2, Oracle iStore)
- [CVE-2021-2188](https://cve.now/CVE-2021-2188.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 8.2, Oracle iStore)
- [CVE-2021-2189](https://cve.now/CVE-2021-2189.md): Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Template). (CVSS 7.5, Oracle Sales Offline)
- [CVE-2021-2190](https://cve.now/CVE-2021-2190.md): Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Template). (CVSS 7.5, Oracle Sales Offline)
- [CVE-2021-2191](https://cve.now/CVE-2021-2191.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). (CVSS 5.4, Oracle Business Intelligence Enterprise Edition)
- [CVE-2021-2192](https://cve.now/CVE-2021-2192.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). (CVSS 6.1, Oracle Solaris Operating System)
- [CVE-2021-2193](https://cve.now/CVE-2021-2193.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2194](https://cve.now/CVE-2021-2194.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2195](https://cve.now/CVE-2021-2195.md): Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Attribute Admin Setup). (CVSS 8.2, Oracle Partner Management)
- [CVE-2021-2178](https://cve.now/CVE-2021-2178.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2021-2179](https://cve.now/CVE-2021-2179.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2180](https://cve.now/CVE-2021-2180.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2181](https://cve.now/CVE-2021-2181.md): Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). (CVSS 7.6, Oracle Document Management and Collaboration)
- [CVE-2021-2182](https://cve.now/CVE-2021-2182.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 8.2, Oracle iStore)
- [CVE-2021-2183](https://cve.now/CVE-2021-2183.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 8.2, Oracle iStore)
- [CVE-2021-2184](https://cve.now/CVE-2021-2184.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 8.2, Oracle iStore)
- [CVE-2021-2185](https://cve.now/CVE-2021-2185.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 8.2, Oracle iStore)
- [CVE-2021-2186](https://cve.now/CVE-2021-2186.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 8.2, Oracle iStore)
- [CVE-2021-2167](https://cve.now/CVE-2021-2167.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). (CVSS 7.8, Oracle Solaris Operating System)
- [CVE-2021-2169](https://cve.now/CVE-2021-2169.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2170](https://cve.now/CVE-2021-2170.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2171](https://cve.now/CVE-2021-2171.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2021-2172](https://cve.now/CVE-2021-2172.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2021-2174](https://cve.now/CVE-2021-2174.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2021-2177](https://cve.now/CVE-2021-2177.md): Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Gateway). (CVSS 10.0, Oracle Secure Global Desktop)
- [CVE-2021-2157](https://cve.now/CVE-2021-2157.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: TopLink Integration). (CVSS 7.5, Oracle TopLink)
- [CVE-2021-2158](https://cve.now/CVE-2021-2158.md): Vulnerability in the Hyperion Financial Management product of Oracle Hyperion (component: Task Automation). (CVSS 3.9, Oracle Hyperion Financial Management)
- [CVE-2021-2159](https://cve.now/CVE-2021-2159.md): Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Frameworks). (CVSS 3.5, Oracle PeopleSoft Enterprise CS Campus Community)
- [CVE-2021-2160](https://cve.now/CVE-2021-2160.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2161](https://cve.now/CVE-2021-2161.md): Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). (CVSS 5.9, Oracle Java SE JDK and JRE)
- [CVE-2021-2162](https://cve.now/CVE-2021-2162.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in). (CVSS 4.3, Oracle MySQL Server)
- [CVE-2021-2163](https://cve.now/CVE-2021-2163.md): Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). (CVSS 5.3, Oracle Java SE JDK and JRE)
- [CVE-2021-2164](https://cve.now/CVE-2021-2164.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2166](https://cve.now/CVE-2021-2166.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2147](https://cve.now/CVE-2021-2147.md): Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Installation). (CVSS 1.8, Oracle Sun ZFS Storage Appliance Kit (AK) Software)
- [CVE-2021-2149](https://cve.now/CVE-2021-2149.md): Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). (CVSS 2.5, Oracle Sun ZFS Storage Appliance Kit (AK) Software)
- [CVE-2021-2150](https://cve.now/CVE-2021-2150.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 8.2, Oracle iStore)
- [CVE-2021-2151](https://cve.now/CVE-2021-2151.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). (CVSS 6.7, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2021-2152](https://cve.now/CVE-2021-2152.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General). (CVSS 4.0, Oracle Business Intelligence Enterprise Edition)
- [CVE-2021-2153](https://cve.now/CVE-2021-2153.md): Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses). (CVSS 4.3, Oracle Internet Expenses)
- [CVE-2021-2154](https://cve.now/CVE-2021-2154.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2155](https://cve.now/CVE-2021-2155.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). (CVSS 4.3, Oracle One-to-One Fulfillment)
- [CVE-2021-2156](https://cve.now/CVE-2021-2156.md): Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Customer Tab). (CVSS 8.1, Oracle Customers Online)
- [CVE-2021-2134](https://cve.now/CVE-2021-2134.md): Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin). (CVSS 6.5, Oracle Enterprise Manager for Fusion Middleware)
- [CVE-2021-2135](https://cve.now/CVE-2021-2135.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2021-2136](https://cve.now/CVE-2021-2136.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2021-2140](https://cve.now/CVE-2021-2140.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 6.1, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2021-2141](https://cve.now/CVE-2021-2141.md): Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Login). (CVSS 2.0, Oracle FLEXCUBE Direct Banking)
- [CVE-2021-2142](https://cve.now/CVE-2021-2142.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 6.1, Oracle WebLogic Server)
- [CVE-2021-2144](https://cve.now/CVE-2021-2144.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). (CVSS 7.2, Oracle MySQL Server)
- [CVE-2021-2145](https://cve.now/CVE-2021-2145.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2021-2146](https://cve.now/CVE-2021-2146.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2008](https://cve.now/CVE-2021-2008.md): Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin). (CVSS 7.3, Oracle Enterprise Manager for Fusion Middleware)
- [CVE-2021-2053](https://cve.now/CVE-2021-2053.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). (CVSS 6.1, Oracle Enterprise Manager Base Platform)
- [CVE-2021-28648](https://cve.now/CVE-2021-28648.md): Trend Micro Antivirus for Mac 2020 v10.5 and 2021 v11 (Consumer) is vulnerable to an improper access control privilege escalation vulnerabil (no CVSS, Trend Micro Antivirus for Mac)
- [CVE-2020-17564](https://cve.now/CVE-2020-17564.md): Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the " Admin/DataActi (no CVSS)
- [CVE-2020-17563](https://cve.now/CVE-2020-17563.md): Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to " /index.php?s=/admi (no CVSS)
- [CVE-2021-24238](https://cve.now/CVE-2021-24238.md): Realteo \< 1.2.4 - Arbitrary Property Deletion via IDOR (no CVSS, PureThemes Realteo · PureThemes Findeo)
- [CVE-2021-24239](https://cve.now/CVE-2021-24239.md): Pie Register \< 3.7.0.1 - Reflected Cross-Site Scripting (XSS) (no CVSS, Pie Register – User Registration Forms. Invitation based re…)
- [CVE-2021-24240](https://cve.now/CVE-2021-24240.md): Business Hours Pro \<= 5.5.0 - Unauthenticated Arbitrary File Upload to RCE (no CVSS, Business Hours Pro)
- [CVE-2021-24241](https://cve.now/CVE-2021-24241.md): Advanced Custom Field Pro \< 5.9.1 - Reflected Cross-Site Scripting (XSS) (no CVSS, Advanced Custom Fields Pro)
- [CVE-2021-24242](https://cve.now/CVE-2021-24242.md): Tutor LMS \< 1.8.8 - Authenticated Local File Inclusion (no CVSS, Themeum Tutor LMS – eLearning and online course solution)
- [CVE-2021-24232](https://cve.now/CVE-2021-24232.md): Advanced Booking Calendar \< 1.6.8 - Authenticated Reflected Cross-Site Scripting (XSS) (no CVSS, Advanced Booking Calendar)
- [CVE-2021-24233](https://cve.now/CVE-2021-24233.md): Cooked Pro \< 1.7.5.6 - Unauthenticated Reflected Cross Site Scripting (XSS) (no CVSS, Cooked Ppro)
- [CVE-2021-24234](https://cve.now/CVE-2021-24234.md): Ivory Search \< 4.6.1 - Reflected Cross Site Scripting (XSS) (no CVSS, Ivory Search – WordPress Search Plugin)
- [CVE-2021-24235](https://cve.now/CVE-2021-24235.md): Goto - Tour & Travel \< 2.0 - Unauthenticated Reflected XSS (no CVSS, Goto)
- [CVE-2021-24237](https://cve.now/CVE-2021-24237.md): Realteo \< 1.2.4 - Unauthenticated Reflected Cross-Site Scripting (XSS) (no CVSS, PureThemes Realteo · PureThemes Findeo)
- [CVE-2021-25670](https://cve.now/CVE-2021-25670.md): A vulnerability has been identified in Tecnomatix RobotExpert (All versions \< V16.1). (no CVSS, Siemens Tecnomatix RobotExpert)
- [CVE-2021-25677](https://cve.now/CVE-2021-25677.md): A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions \< V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions \< (CVSS 5.3, Siemens APOGEE PXC Compact · Siemens APOGEE PXC Modular +6)
- [CVE-2021-25678](https://cve.now/CVE-2021-25678.md): A vulnerability has been identified in Solid Edge SE2020 (All versions \< SE2020MP13), Solid Edge SE2020 (All versions \< SE2020MP14), Solid E (no CVSS, Siemens Solid Edge SE2020 · Siemens Solid Edge SE2021)
- [CVE-2021-27382](https://cve.now/CVE-2021-27382.md): A vulnerability has been identified in Solid Edge SE2020 (All versions \< SE2020MP13), Solid Edge SE2020 (All versions \< SE2020MP14), Solid E (no CVSS, Siemens Solid Edge SE2020 · Siemens Solid Edge SE2021)
- [CVE-2021-27389](https://cve.now/CVE-2021-27389.md): A vulnerability has been identified in Opcenter Quality (All versions \< V12.2), QMS Automotive (All versions \< V12.30). (no CVSS, Siemens Opcenter Quality · Siemens QMS Automotive)
- [CVE-2021-27392](https://cve.now/CVE-2021-27392.md): A vulnerability has been identified in Siveillance Video Open Network Bridge (2020 R3), Siveillance Video Open Network Bridge (2020 R2), Siv (no CVSS, Siemens Siveillance Video Open Network Bridge)
- [CVE-2021-27393](https://cve.now/CVE-2021-27393.md): A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \< V2013.08), Nucleus Source Code (Ver (no CVSS, Siemens Nucleus NET · Siemens Nucleus ReadyStart +1)
- [CVE-2020-27738](https://cve.now/CVE-2020-27738.md): A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions \< V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions \< (CVSS 6.5, Siemens APOGEE PXC Compact · Siemens APOGEE PXC Modular +6)
- [CVE-2021-25663](https://cve.now/CVE-2021-25663.md): A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions (CVSS 7.5, Siemens Capital Embedded AR Classic 431-422 · Siemens Ca… +3)
- [CVE-2021-25664](https://cve.now/CVE-2021-25664.md): A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions (CVSS 7.5, Siemens Capital Embedded AR Classic 431-422 · Siemens Ca… +3)
- [CVE-2021-25668](https://cve.now/CVE-2021-25668.md): A vulnerability has been identified in SCALANCE X200-4P IRT (All versions \< 5.5.1), SCALANCE X201-3P IRT (All versions \< 5.5.1), SCALANCE X2 (no CVSS, Siemens SCALANCE X200-4P IRT · Siemens SCALANCE X201-3P… +22)
- [CVE-2021-25669](https://cve.now/CVE-2021-25669.md): A vulnerability has been identified in SCALANCE X200-4P IRT (All versions \< 5.5.1), SCALANCE X201-3P IRT (All versions \< 5.5.1), SCALANCE X2 (no CVSS, Siemens SCALANCE X200-4P IRT · Siemens SCALANCE X201-3P… +22)
- [CVE-2020-15795](https://cve.now/CVE-2020-15795.md): A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions \< V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions \< (CVSS 8.1, Siemens APOGEE PXC Compact · Siemens APOGEE PXC Modular +4)
- [CVE-2020-25243](https://cve.now/CVE-2020-25243.md): A vulnerability has been identified in LOGO! Soft Comfort (All versions \< V8.4). (CVSS 5.1, Siemens LOGO! Soft Comfort)
- [CVE-2020-25244](https://cve.now/CVE-2020-25244.md): A vulnerability has been identified in LOGO! Soft Comfort (All versions \< V8.4). (CVSS 8.4, Siemens LOGO! Soft Comfort)
- [CVE-2020-26997](https://cve.now/CVE-2020-26997.md): A vulnerability has been identified in Solid Edge SE2020 (All versions \< SE2020MP13), Solid Edge SE2020 (All versions \< SE2020MP14), Solid E (no CVSS, Siemens Solid Edge SE2020 · Siemens Solid Edge SE2021)
- [CVE-2020-27009](https://cve.now/CVE-2020-27009.md): A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions \< V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions \< (CVSS 8.1, Siemens APOGEE PXC Compact · Siemens APOGEE PXC Modular +4)
- [CVE-2020-27736](https://cve.now/CVE-2020-27736.md): A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions \< V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions \< (CVSS 6.5, Siemens APOGEE PXC Compact · Siemens APOGEE PXC Modular +6)
- [CVE-2020-27737](https://cve.now/CVE-2020-27737.md): A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions \< V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions \< (CVSS 6.5, Siemens APOGEE PXC Compact · Siemens APOGEE PXC Modular +6)
- [CVE-2021-0275](https://cve.now/CVE-2021-0275.md): Junos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session. (CVSS 8.8, Juniper Networks Junos OS)
- [CVE-2021-0273](https://cve.now/CVE-2021-0273.md): Junos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device's interfaces. (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2021-0272](https://cve.now/CVE-2021-0272.md): Junos OS: QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: In EVPN-VXLAN scenarios receipt of specific genuine packets by an adjacent attacker will cause a kernel memory leak in FPC. (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-0271](https://cve.now/CVE-2021-0271.md): Junos OS: EX2200-C Series, EX3200 Series, EX3300 Series, EX4200 Series, EX4500 Series, EX4550 Series, EX6210 Series, EX8208 Series, EX8216 Series: Receipt of a crafted ARP packet by an adjacent attacker will cause the sfid process to core. (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-0270](https://cve.now/CVE-2021-0270.md): Junos OS: PTX Series, QFX10K Series: A PTX/QFX FPC may restart unexpectedly with the "inline-Jflow" feature enabled on a large-scale deployment (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2021-0269](https://cve.now/CVE-2021-0269.md): Junos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution attacks. (CVSS 8.8, Juniper Networks Junos OS)
- [CVE-2021-0268](https://cve.now/CVE-2021-0268.md): Junos OS: J-Web has an Improper Neutralization of CRLF Sequences in its HTTP Headers which allows an attacker to carry out multiple types of attacks. (CVSS 8.8, Juniper Networks Junos OS)
- [CVE-2021-0267](https://cve.now/CVE-2021-0267.md): Junos OS: Receipt of a crafted DHCP packet will cause the jdhcpd DHCP service to core. (CVSS 7.4, Juniper Networks Junos OS)
- [CVE-2021-0266](https://cve.now/CVE-2021-0266.md): cSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services. (CVSS 8.1, Juniper Networks Junos OS)
- [CVE-2021-0265](https://cve.now/CVE-2021-0265.md): Contrail Insights: The REST API implementation allows an unauthenticated remote attacker to execute commands as root. (CVSS 8.1, Juniper Networks Contrail Insights)
- [CVE-2021-0264](https://cve.now/CVE-2021-0264.md): Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configured (CVSS 5.9, Juniper Networks Junos OS)
- [CVE-2021-0263](https://cve.now/CVE-2021-0263.md): Junos OS: PTX Series: Denial of Service in packet processing due to heavy route churn when J-Flow sampling is enabled (CVSS 5.9, Juniper Networks Junos OS)
- [CVE-2021-0262](https://cve.now/CVE-2021-0262.md): Junos OS: QFX10002-60C: Use after free vulnerability found during static code analysis (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-0261](https://cve.now/CVE-2021-0261.md): Junos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requests (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2021-0260](https://cve.now/CVE-2021-0260.md): Junos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests. (CVSS 7.3, Juniper Networks Junos OS)
- [CVE-2021-0259](https://cve.now/CVE-2021-0259.md): Junos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenario (CVSS 7.4, Juniper Networks Junos OS)
- [CVE-2021-0258](https://cve.now/CVE-2021-0258.md): Junos OS: Kernel panic upon receipt of specific TCPv6 packet on management interface (CVSS 5.9, Juniper Networks Junos OS)
- [CVE-2021-0257](https://cve.now/CVE-2021-0257.md): Junos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interface (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-0256](https://cve.now/CVE-2021-0256.md): Junos OS: mosquitto Local Privilege Escalation vulnerability in SUID binaries (CVSS 5.5, Juniper Networks Junos OS)
- [CVE-2021-0255](https://cve.now/CVE-2021-0255.md): Junos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binaries (CVSS 5.5, Juniper Networks Junos OS)
- [CVE-2021-0254](https://cve.now/CVE-2021-0254.md): Junos OS: Remote code execution vulnerability in overlayd service (CVSS 9.8, Juniper Networks Junos OS)
- [CVE-2021-0253](https://cve.now/CVE-2021-0253.md): Junos OS: NFX Series: Local Command Execution Vulnerability in JDMD Leads to Privilege Escalation (CVSS 7.8, Juniper Networks Junos OS)
- [CVE-2021-0252](https://cve.now/CVE-2021-0252.md): Junos OS: NFX Series: Local Code Execution Vulnerability in JDMD Leads to Privilege Escalation (CVSS 7.8, Juniper Networks Junos OS)
- [CVE-2021-0251](https://cve.now/CVE-2021-0251.md): Junos OS: MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC: The BRAS Subscriber Services service activation portal is vulnerable to a Denial of Service (DoS) via malformed HTTP packets (CVSS 8.6, Juniper Networks Junos OS)
- [CVE-2021-0250](https://cve.now/CVE-2021-0250.md): Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2021-0249](https://cve.now/CVE-2021-0249.md): Junos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled. (CVSS 8.1, Juniper Networks Junos OS)
- [CVE-2021-0248](https://cve.now/CVE-2021-0248.md): NFX Series: Hard-coded credentials allow an attacker to take control of any instance through administrative interfaces. (CVSS 10.0, Juniper Networks Junos OS)
- [CVE-2021-0247](https://cve.now/CVE-2021-0247.md): Junos OS: PTX Series, QFX Series: Due to a race condition input loopback firewall filters applied to interfaces may not operate even when listed in the running configuration. (CVSS 5.1, Juniper Networks Junos OS)
- [CVE-2021-0246](https://cve.now/CVE-2021-0246.md): Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3: In a multi-tenant environment, a tenant host administrator may be able to jailbreak out of their network impacting other tenant networks or gather information from other networks. (CVSS 7.3, Juniper Networks Junos OS)
- [CVE-2021-0245](https://cve.now/CVE-2021-0245.md): Junos OS: Junos Fusion: Hard-coded credentials on satellite devices allows a locally authenticated attacker to elevate their privileges. (CVSS 7.8, Juniper Networks Junos OS)
- [CVE-2021-0244](https://cve.now/CVE-2021-0244.md): Junos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service condition (CVSS 7.4, Juniper Networks Junos OS)
- [CVE-2021-0243](https://cve.now/CVE-2021-0243.md): Junos OS: EX4300: Stateless firewall policer fails to discard traffic (CVSS 4.7, Juniper Networks Junos OS)
- [CVE-2021-0242](https://cve.now/CVE-2021-0242.md): Junos OS: EX4300: FPC crash upon receipt of specific frames on an interface without L2PT or dot1x configured (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-0241](https://cve.now/CVE-2021-0241.md): Junos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restart (CVSS 7.4, Juniper Networks Junos OS)
- [CVE-2021-0240](https://cve.now/CVE-2021-0240.md): Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart. (CVSS 7.4, Juniper Networks Junos OS)
- [CVE-2021-0239](https://cve.now/CVE-2021-0239.md): Junos OS Evolved: Denial of Service due to receipt of specific genuine layer 2 frames. (CVSS 6.5, Juniper Networks Junos OS Evolved)
- [CVE-2021-0238](https://cve.now/CVE-2021-0238.md): Junos OS: MX Series: Executing CLI command repetitively may cause the system to run out of disk space (CVSS 5.5, Juniper Networks Junos OS)
- [CVE-2021-0237](https://cve.now/CVE-2021-0237.md): Junos OS: EX4300-MP/EX4600/EX4650/QFX5K Series: Packet Forwarding Engine manager (FXPC) process crashes when deployed in a Virtual Chassis (VC) configuration (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-0236](https://cve.now/CVE-2021-0236.md): Junos OS: A specific BGP VPNv6 flowspec message causes routing protocol daemon (rpd) process to crash with a core. (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-0235](https://cve.now/CVE-2021-0235.md): Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series: In a multi-tenant environment, a tenant host administrator may configure logical firewall isolation affecting other tenant networks (CVSS 7.3, Juniper Networks Junos OS)
- [CVE-2021-0234](https://cve.now/CVE-2021-0234.md): Junos OS: QFX5100-96S: DDoS protection does not work as expected. (CVSS 5.8, Juniper Networks Junos OS)
- [CVE-2021-0233](https://cve.now/CVE-2021-0233.md): Junos OS: ACX500 Series, ACX4000 Series: Denial of Service due to FFEB crash while processing high rate of specific packets. (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2021-0232](https://cve.now/CVE-2021-0232.md): Paragon Active Assurance: Authentication bypass vulnerability in Control Center (CVSS 7.4, Juniper Networks Paragon Active Assurance)
- [CVE-2021-0231](https://cve.now/CVE-2021-0231.md): Junos OS: SRX, vSRX Series: J-Web Path traversal vulnerability in SRX and vSRX Series leads to information disclosure. (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-0230](https://cve.now/CVE-2021-0230.md): Junos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statistics (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2021-0229](https://cve.now/CVE-2021-0229.md): Junos OS: Receipt of specific packets could lead to Denial of Service in MQTT Server (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2021-0228](https://cve.now/CVE-2021-0228.md): Junos OS: MX Series: DDoS LACP violation upon receipt of specific layer 2 frames in EVPN-VXLAN deployment (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-0227](https://cve.now/CVE-2021-0227.md): Junos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2021-0226](https://cve.now/CVE-2021-0226.md): Junos OS Evolved: The IPv6 BGP session will flap due to receipt of a specific IPv6 packet (CVSS 7.1, Juniper Networks Junos OS Evolved)
- [CVE-2021-0225](https://cve.now/CVE-2021-0225.md): Junos OS Evolved: Stateless IP firewall filter does not work as expected (CVSS 5.8, Juniper Networks Junos OS Evolved)
- [CVE-2021-0224](https://cve.now/CVE-2021-0224.md): Junos OS: ANCPD core when hitting maximum-discovery-table-entries limit (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-0216](https://cve.now/CVE-2021-0216.md): Junos OS: ACX5448, ACX710: BFD sessions might flap due to high rate of transit ARP packets (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-0214](https://cve.now/CVE-2021-0214.md): Junos OS: Denial of Service in ppmd upon receipt of malformed packet (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-20590](https://cve.now/CVE-2021-20590.md): Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC se (no CVSS, GOT2000 series GT27 model · GOT2000 series GT25 model +4)
- [CVE-2021-23133](https://cve.now/CVE-2021-23133.md): Linux Kernel sctp\_destroy\_sock race condition (CVSS 6.7, Linux Kernel)
- [CVE-2020-7858](https://cve.now/CVE-2020-7858.md): AquaNPlayer directory traversing vulnerability (CVSS 6.8, cdnetworks AquaNPlayer)
- [CVE-2021-31572](https://cve.now/CVE-2021-31572.md): The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in stream\_buffer.c for a stream buffer. (no CVSS)
- [CVE-2021-31571](https://cve.now/CVE-2021-31571.md): The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in queue.c for queue creation. (no CVSS)
- [CVE-2021-27278](https://cve.now/CVE-2021-27278.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. (CVSS 8.2, Parallels Desktop)
- [CVE-2021-27277](https://cve.now/CVE-2021-27277.md): This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Orion Virtual Infrastructure Monito (CVSS 7.8, SolarWinds Orion Virtual Infrastructure Monitor)
- [CVE-2021-30356](https://cve.now/CVE-2021-30356.md): A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to (no CVSS, Check Point Identity Agent)
- [CVE-2021-28168](https://cve.now/CVE-2021-28168.md): Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability. (CVSS 6.2, The Eclipse Foundation Eclipse Jersey · org.glassfish.jerse…)
- [CVE-2020-7861](https://cve.now/CVE-2020-7861.md): AnySupport directory traversing vulnerability (CVSS 8.4, Koino AquaNPlayer)
- [CVE-2021-27400](https://cve.now/CVE-2021-27400.md): HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certif (no CVSS)
- [CVE-2021-29653](https://cve.now/CVE-2021-29653.md): HashiCorp Vault and Vault Enterprise 1.5.1 and newer, under certain circumstances, may exclude revoked but unexpired certificates from the C (no CVSS)
- [CVE-2021-30476](https://cve.now/CVE-2021-30476.md): HashiCorp Terraform’s Vault Provider (terraform-provider-vault) did not correctly configure GCE-type bound labels for Vault’s GCP auth metho (no CVSS)
- [CVE-2021-22540](https://cve.now/CVE-2021-22540.md): XSS in Dart SDK (no CVSS, Google Dart SDK)
- [CVE-2021-27736](https://cve.now/CVE-2021-27736.md): FusionAuth fusionauth-samlv2 before 0.5.4 allows XXE attacks via a forged AuthnRequest or LogoutRequest because parseFromBytes uses javax.xm (no CVSS)
- [CVE-2021-3287](https://cve.now/CVE-2021-3287.md): Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization clas (no CVSS)
- [CVE-2021-31545](https://cve.now/CVE-2021-31545.md): An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. (no CVSS)
- [CVE-2021-31546](https://cve.now/CVE-2021-31546.md): An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. (no CVSS)
- [CVE-2021-31547](https://cve.now/CVE-2021-31547.md): An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. (no CVSS)
- [CVE-2021-31548](https://cve.now/CVE-2021-31548.md): An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. (no CVSS)
- [CVE-2021-31549](https://cve.now/CVE-2021-31549.md): An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. (no CVSS)
- [CVE-2021-31550](https://cve.now/CVE-2021-31550.md): An issue was discovered in the CommentBox extension for MediaWiki through 1.35.2. (no CVSS)
- [CVE-2021-31551](https://cve.now/CVE-2021-31551.md): An issue was discovered in the PageForms extension for MediaWiki through 1.35.2. (no CVSS)
- [CVE-2021-31552](https://cve.now/CVE-2021-31552.md): An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. (no CVSS)
- [CVE-2021-31553](https://cve.now/CVE-2021-31553.md): An issue was discovered in the CheckUser extension for MediaWiki through 1.35.2. (no CVSS)
- [CVE-2021-31554](https://cve.now/CVE-2021-31554.md): An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. (no CVSS)
- [CVE-2021-31555](https://cve.now/CVE-2021-31555.md): An issue was discovered in the Oauth extension for MediaWiki through 1.35.2. (no CVSS)
- [CVE-2021-29466](https://cve.now/CVE-2021-29466.md): Path Traversal at Discord-Recon .recon Command Path (CVSS 6.5, DEMON1A Discord-Recon)
- [CVE-2021-29465](https://cve.now/CVE-2021-29465.md): Remote file overwrite on discord-recon can result in DoS and Remote Code Execution (CVSS 8.3, DEMON1A Discord-Recon)
- [CVE-2021-29467](https://cve.now/CVE-2021-29467.md): Self-XSS (CVSS 6.1, birb-digital wrongthink)
- [CVE-2021-2173](https://cve.now/CVE-2021-2173.md): Vulnerability in the Recovery component of Oracle Database Server. (CVSS 4.1, Oracle Database - Enterprise Edition)
- [CVE-2021-2175](https://cve.now/CVE-2021-2175.md): Vulnerability in the Database Vault component of Oracle Database Server. (CVSS 2.7, Oracle Database - Enterprise Edition)
- [CVE-2021-2207](https://cve.now/CVE-2021-2207.md): Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. (CVSS 2.3, Oracle Database - Enterprise Edition)
- [CVE-2021-3496](https://cve.now/CVE-2021-3496.md): A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafted file. (no CVSS, jhead)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-04-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.