CVEs published July 20, 2021
174 CVEs were published on July 20, 2021: 8 critical, 52 high.
- Published
- 174
- Critical
- 8
- High
- 52
- Medium
- 77
- Low
- 10
- Unrated
- 27
- Now in CISA KEV
- 0
- Fix available
- 16
Most affected products
- Oracle MySQL Server
- 33
- Oracle Outside In Technology
- 10
- Oracle Database - Enterprise Edition
- 9
- Oracle WebLogic Server
- 7
- Oracle BI Publisher
- 5
- Oracle Java SE JDK and JRE
- 4
- Oracle VM VirtualBox
- 4
- TYPO3.CMS · typo3/cms-core +1
- 4
- Atlassian Jira Server · Atlassian Jira Data Center
- 3
- Commerce Guided Search / Oracle Commerce Experience Manager
- 3
Critical 8
- CVE-2021-2463Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).Oracle Commerce Platform
- CVE-2021-2456Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General).Oracle Business Intelligence Enterprise Edition
- CVE-2021-2447Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server).Oracle Secure Global Desktop
- CVE-2021-2446Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client).Oracle Secure Global Desktop
- CVE-2021-2397Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2021-2394Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2021-2382Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Security).Oracle WebLogic Server
- CVE-2021-2355Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
High 52
- CVE-2021-32751Arbitrary code execution via specially crafted environment variablesgradle
- CVE-2021-2458Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Identity Console).Oracle Identity Manager
- CVE-2021-2454Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2453Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2021-2452Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2021-2451Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2021-2450Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2021-2449Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2021-2443Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2436Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).Oracle Common Applications
- CVE-2021-2435Vulnerability in the Essbase Analytic Provider Services product of Oracle Essbase (component: JAPI).Oracle Hyperion Analytic Provider Services
- CVE-2021-2434Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Application Service).Oracle Web Applications Desktop Integrator
- CVE-2021-2433Vulnerability in the Essbase Analytic Provider Services product of Oracle Essbase (component: Web Services).Oracle Hyperion Analytic Provider Services
- CVE-2021-2431Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2021-2430Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2021-2428Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2021-2423Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2021-2420Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2021-2419Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2021-2415Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Timecard).Oracle Time and Labor
- CVE-2021-2409Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2406Vulnerability in the Oracle Collaborative Planning product of Oracle E-Business Suite (component: User Interface).Oracle Collaborative Planning
- CVE-2021-2405Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management).Oracle Engineering
- CVE-2021-2400Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).Oracle BI Publisher
- CVE-2021-2398Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Region Mapping).Oracle Advanced Outbound Telephony
- CVE-2021-2396Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).Oracle BI Publisher
- CVE-2021-2395Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: iCare, ConfigurOracle Hospitality Reporting and Analytics
- CVE-2021-2393Vulnerability in the Oracle E-Records product of Oracle E-Business Suite (component: E-signatures).Oracle E-Records
- CVE-2021-2392Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).Oracle BI Publisher
- CVE-2021-2391Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Scheduler).Oracle BI Publisher
- CVE-2021-2388Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).Oracle Java SE JDK and JRE
- CVE-2021-2380Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload).Oracle Applications Framework
- CVE-2021-2378Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2021-2376Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services).Oracle WebLogic Server
- CVE-2021-2371Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2021-2365Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: People Management).Oracle Human Resources
- CVE-2021-2364Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Accounts).Oracle iSupplier Portal
- CVE-2021-2363Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization).Oracle Public Sector Financials
- CVE-2021-2362Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Wireless).Oracle Field Service
- CVE-2021-2361Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: SDK client integration).Oracle Advanced Inbound Telephony
- CVE-2021-2360Vulnerability in the Oracle Approvals Management product of Oracle E-Business Suite (component: AME Page rendering).Oracle Approvals Management
- CVE-2021-2359Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2021-2351Vulnerability in the Advanced Networking Option component of Oracle Database Server.Oracle WebLogic Server
- CVE-2021-2350Vulnerability in the Hyperion Essbase Administration Services product of Oracle Essbase (component: EAS Console).Oracle Hyperion Essbase Administration Services
- CVE-2021-2349Vulnerability in the Hyperion Essbase Administration Services product of Oracle Essbase (component: EAS Console).Oracle Hyperion Essbase Administration Services
- CVE-2021-2344Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2021-2337Vulnerability in the Oracle XML DB component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2021-2329Vulnerability in the Oracle XML DB component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2021-2328Vulnerability in the Oracle Text component of Oracle Database Server.Oracle Text
- CVE-2021-26095The combination of various cryptographic issues in the session management of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6, includinFortinet FortiMail
- CVE-2020-7866Tobesoft XPLATFORM Arbitrary Command Execution VulnerabilityTobesoft XPLATFORM
- CVE-2021-22235Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture fileThe Wireshark Foundation Wireshark
Medium, low and unrated 114
- CVE-2021-2462Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center).Oracle Commerce Service Center
- CVE-2021-2460Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server.Oracle Application Express
- CVE-2021-2457Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Request Management & Workflow).Oracle Identity Manager
- CVE-2021-2455Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft (component: Person Search).Oracle PeopleSoft Enterprise HCM Shared Components
- CVE-2021-2448Vulnerability in the Oracle Financial Services Crime and Compliance Investigation Hub product of Oracle Financial Services Applications (comOracle Financial Services Crime and Compliance Investigatio…
- CVE-2021-2445Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management).Oracle Hyperion Infrastructure Technology
- CVE-2021-2444Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2442Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2021-2440Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2021-2441Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2439Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion (component: UI and Visualization).Oracle Hyperion BI+
- CVE-2021-2438Vulnerability in the Java VM component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2021-2437Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2432Vulnerability in the Java SE product of Oracle Java SE (component: JNDI).Oracle Java SE JDK and JRE
- CVE-2021-2429Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2021-2427Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2426Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2425Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2424Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).Oracle MySQL Server
- CVE-2021-2421Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Integration and Interfaces).Oracle PeopleSoft Enterprise CS Campus Community
- CVE-2021-2422Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS).Oracle MySQL Server
- CVE-2021-2418Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2417Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS).Oracle MySQL Server
- CVE-2021-2412Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2411Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: JS module).Oracle MySQL Cluster
- CVE-2021-2410Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2408Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Notification Configuration).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2021-2407Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2021-2404Vulnerability in the PeopleSoft Enterprise HCM Candidate Gateway product of Oracle PeopleSoft (component: e-mail notification).Oracle PeopleSoft Enterprise HCM Candidate Gateway
- CVE-2021-2403Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2021-2402Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking).Oracle MySQL Server
- CVE-2021-2401Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).Oracle BI Publisher
- CVE-2021-2399Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2021-2390Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2021-2389Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2021-2387Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2386Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web AccOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2021-2385Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server
- CVE-2021-2384Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2383Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2381Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).Oracle Solaris Operating System
- CVE-2021-2377Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2021-2375Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime).Oracle JD Edwards EnterpriseOne Tools
- CVE-2021-2374Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2021-2372Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2021-2373Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime).Oracle JD Edwards EnterpriseOne Tools
- CVE-2021-2370Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2021-2368Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: Siebel Core - Server Infrastructure).Oracle Siebel Core - Server Framework
- CVE-2021-2367Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2366Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web AccOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2021-2358Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Rest interfaces for Access Mgr).Oracle Access Manager
- CVE-2021-2357Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2356Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server
- CVE-2021-2354Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated).Oracle MySQL Server
- CVE-2021-2353Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Loging).Oracle Siebel Core - Server Framework
- CVE-2021-2352Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2021-2348Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and FraCommerce Guided Search / Oracle Commerce Experience Manager
- CVE-2021-2347Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management).Oracle Hyperion Infrastructure Technology
- CVE-2021-2346Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and FraCommerce Guided Search / Oracle Commerce Experience Manager
- CVE-2021-2345Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and FraCommerce Guided Search / Oracle Commerce Experience Manager
- CVE-2021-2343Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).Oracle Workflow
- CVE-2021-2342Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2021-2341Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).Oracle Java SE JDK and JRE
- CVE-2021-2340Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached).Oracle MySQL Server
- CVE-2021-2339Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2021-2338Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing Stand-Alone).Oracle Siebel Apps - Marketing
- CVE-2021-2336Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2021-2335Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2021-2333Vulnerability in the Oracle XML DB component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2021-2334Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2021-2330Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2021-2326Vulnerability in the Database Vault component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2021-2324Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Loans And Deposits).Oracle FLEXCUBE Universal Banking
- CVE-2021-2323Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Flex-Branch).Oracle FLEXCUBE Universal Banking
- CVE-2021-36230HashiCorp Terraform Enterprise releases up to v202106-1 did not properly perform authorization checks on a subset of API requests executed u
- CVE-2021-36746Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor.
- CVE-2021-36747Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form.
- CVE-2020-23284Information disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to copy and paste aspx pages in the end of the URL app
- CVE-2020-25206The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, Phy
- CVE-2020-25205The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 is vulnerable to stored XSS in the set_banner() function of /var/www/co
- CVE-2021-33910basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdup
- CVE-2021-33909fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer
- CVE-2021-20478IBM Cloud Pak System 2.3 could allow a local user in some situations to view the artifacts of another user in self service console.IBM Cloud Pak System
- CVE-2021-32763Regular Expression Denial of Service in OpenProject forum messagesopf openproject
- CVE-2021-32767Information Disclosure in User AuthenticationTYPO3.CMS · typo3/cms-core +1
- CVE-2021-32669Cross-Site Scripting in Backend Grid ViewTYPO3.CMS · typo3/cms-core +1
- CVE-2021-32668Cross-Site Scripting in Query Generator & Query ViewTYPO3.CMS · typo3/cms-core +1
- CVE-2021-32667Cross-Site Scripting in Page PreviewTYPO3.CMS · typo3/cms-core +1
- CVE-2020-35427SQL injection vulnerability in PHPGurukul Employee Record Management System 1.1 allows remote attackers to execute arbitrary SQL commands an
- CVE-2021-27338Faraday Edge before 3.7 allows XSS via the network/create/ page and its network name parameter.
- CVE-2021-27517Foxit PDF SDK For Web through 7.5.0 allows XSS.
- CVE-2020-15660Missing checks on Content-Type headers in geckodriver before 0.27.0 could lead to a CSRF vulnerability, that might, when paired with a speci
- CVE-2021-32463An incorrect permission assignment denial-of-service vulnerability in Trend Micro Apex One, Apex One as a Service (SaaS), Worry-Free BusinesTrend Micro Apex One · Trend Micro Worry-Free Business Secu…
- CVE-2021-27021A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL queryPuppet DB
- CVE-2021-24022A buffer overflow vulnerability in FortiAnalyzer CLI 6.4.5 and below, 6.2.7 and below, 6.0.x and FortiManager CLI 6.4.5 and below, 6.2.7 andFortinet FortiAnalyzer, FortiManager
- CVE-2021-22125An instance of improper neutralization of special elements in the sniffer module of FortiSandbox before 3.2.2 may allow an authenticated admFortinet FortiSandbox
- CVE-2021-35054Minecraft before 1.17.1, when online-mode=false is configured, allows path traversal for deletion of arbitrary JSON files.
- CVE-2021-36976libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).
- CVE-2021-36977matio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MM_memcpy (called from H5MM_malloc and H5C_load_ent
- CVE-2021-36979Unicorn Engine 1.0.2 has an out-of-bounds write in tb_flush_armeb (called from cpu_arm_exec_armeb and tcg_cpu_exec_armeb).
- CVE-2020-36428matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data an
- CVE-2020-36429Variant_encodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth.
- CVE-2020-36430libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong in
- CVE-2020-36431Unicorn Engine 1.0.2 has an out-of-bounds write in helper_wfe_arm.
- CVE-2019-25050netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in gdal
- CVE-2019-25051objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommo
- CVE-2021-26083Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8Atlassian Jira Server · Atlassian Jira Data Center
- CVE-2021-26082The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.Atlassian Jira Server · Atlassian Jira Data Center
- CVE-2021-26081REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 befoAtlassian Jira Server · Atlassian Jira Data Center
- CVE-2021-32774Cross-Site Request Forgery (CSRF) in DataDumpmiraheze DataDump
- CVE-2021-2369Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Library).Oracle Java SE JDK and JRE
- CVE-2021-3246A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted W
- CVE-2021-36978QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush a
- CVE-2021-36980Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_d