# CVEs published 2021-07-20

174 CVEs were published on July 20, 2021: 8 critical, 52 high. Days are UTC.

- [CVE-2021-32751](https://cve.now/CVE-2021-32751.md): Arbitrary code execution via specially crafted environment variables (CVSS 7.5, gradle)
- [CVE-2021-2463](https://cve.now/CVE-2021-2463.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 9.8, Oracle Commerce Platform)
- [CVE-2021-2462](https://cve.now/CVE-2021-2462.md): Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). (CVSS 6.1, Oracle Commerce Service Center)
- [CVE-2021-2460](https://cve.now/CVE-2021-2460.md): Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. (CVSS 5.4, Oracle Application Express)
- [CVE-2021-2458](https://cve.now/CVE-2021-2458.md): Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Identity Console). (CVSS 7.6, Oracle Identity Manager)
- [CVE-2021-2457](https://cve.now/CVE-2021-2457.md): Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Request Management & Workflow). (CVSS 5.3, Oracle Identity Manager)
- [CVE-2021-2456](https://cve.now/CVE-2021-2456.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General). (CVSS 9.8, Oracle Business Intelligence Enterprise Edition)
- [CVE-2021-2455](https://cve.now/CVE-2021-2455.md): Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft (component: Person Search). (CVSS 6.5, Oracle PeopleSoft Enterprise HCM Shared Components)
- [CVE-2021-2454](https://cve.now/CVE-2021-2454.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.0, Oracle VM VirtualBox)
- [CVE-2021-2453](https://cve.now/CVE-2021-2453.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-2452](https://cve.now/CVE-2021-2452.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-2451](https://cve.now/CVE-2021-2451.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-2450](https://cve.now/CVE-2021-2450.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-2449](https://cve.now/CVE-2021-2449.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-2448](https://cve.now/CVE-2021-2448.md): Vulnerability in the Oracle Financial Services Crime and Compliance Investigation Hub product of Oracle Financial Services Applications (com (CVSS 3.7, Oracle Financial Services Crime and Compliance Investigatio…)
- [CVE-2021-2447](https://cve.now/CVE-2021-2447.md): Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). (CVSS 9.9, Oracle Secure Global Desktop)
- [CVE-2021-2446](https://cve.now/CVE-2021-2446.md): Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). (CVSS 9.6, Oracle Secure Global Desktop)
- [CVE-2021-2445](https://cve.now/CVE-2021-2445.md): Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). (CVSS 5.7, Oracle Hyperion Infrastructure Technology)
- [CVE-2021-2444](https://cve.now/CVE-2021-2444.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2443](https://cve.now/CVE-2021-2443.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.3, Oracle VM VirtualBox)
- [CVE-2021-2442](https://cve.now/CVE-2021-2442.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2021-2440](https://cve.now/CVE-2021-2440.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2441](https://cve.now/CVE-2021-2441.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2439](https://cve.now/CVE-2021-2439.md): Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion (component: UI and Visualization). (CVSS 4.3, Oracle Hyperion BI+)
- [CVE-2021-2438](https://cve.now/CVE-2021-2438.md): Vulnerability in the Java VM component of Oracle Database Server. (CVSS 4.3, Oracle Database - Enterprise Edition)
- [CVE-2021-2437](https://cve.now/CVE-2021-2437.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2436](https://cve.now/CVE-2021-2436.md): Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). (CVSS 8.2, Oracle Common Applications)
- [CVE-2021-2435](https://cve.now/CVE-2021-2435.md): Vulnerability in the Essbase Analytic Provider Services product of Oracle Essbase (component: JAPI). (CVSS 8.1, Oracle Hyperion Analytic Provider Services)
- [CVE-2021-2434](https://cve.now/CVE-2021-2434.md): Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Application Service). (CVSS 8.1, Oracle Web Applications Desktop Integrator)
- [CVE-2021-2433](https://cve.now/CVE-2021-2433.md): Vulnerability in the Essbase Analytic Provider Services product of Oracle Essbase (component: Web Services). (CVSS 7.5, Oracle Hyperion Analytic Provider Services)
- [CVE-2021-2432](https://cve.now/CVE-2021-2432.md): Vulnerability in the Java SE product of Oracle Java SE (component: JNDI). (CVSS 3.7, Oracle Java SE JDK and JRE)
- [CVE-2021-2431](https://cve.now/CVE-2021-2431.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-2430](https://cve.now/CVE-2021-2430.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-2429](https://cve.now/CVE-2021-2429.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 5.9, Oracle MySQL Server)
- [CVE-2021-2428](https://cve.now/CVE-2021-2428.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 8.1, Oracle Coherence)
- [CVE-2021-2427](https://cve.now/CVE-2021-2427.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2426](https://cve.now/CVE-2021-2426.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2425](https://cve.now/CVE-2021-2425.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2424](https://cve.now/CVE-2021-2424.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2423](https://cve.now/CVE-2021-2423.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-2421](https://cve.now/CVE-2021-2421.md): Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Integration and Interfaces). (CVSS 6.5, Oracle PeopleSoft Enterprise CS Campus Community)
- [CVE-2021-2422](https://cve.now/CVE-2021-2422.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2420](https://cve.now/CVE-2021-2420.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-2419](https://cve.now/CVE-2021-2419.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-2418](https://cve.now/CVE-2021-2418.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2417](https://cve.now/CVE-2021-2417.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). (CVSS 6.0, Oracle MySQL Server)
- [CVE-2021-2415](https://cve.now/CVE-2021-2415.md): Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Timecard). (CVSS 8.1, Oracle Time and Labor)
- [CVE-2021-2412](https://cve.now/CVE-2021-2412.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2411](https://cve.now/CVE-2021-2411.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: JS module). (CVSS 3.7, Oracle MySQL Cluster)
- [CVE-2021-2410](https://cve.now/CVE-2021-2410.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2409](https://cve.now/CVE-2021-2409.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2021-2408](https://cve.now/CVE-2021-2408.md): Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Notification Configuration). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2021-2407](https://cve.now/CVE-2021-2407.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 5.3, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2021-2406](https://cve.now/CVE-2021-2406.md): Vulnerability in the Oracle Collaborative Planning product of Oracle E-Business Suite (component: User Interface). (CVSS 8.1, Oracle Collaborative Planning)
- [CVE-2021-2404](https://cve.now/CVE-2021-2404.md): Vulnerability in the PeopleSoft Enterprise HCM Candidate Gateway product of Oracle PeopleSoft (component: e-mail notification). (CVSS 6.5, Oracle PeopleSoft Enterprise HCM Candidate Gateway)
- [CVE-2021-2405](https://cve.now/CVE-2021-2405.md): Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). (CVSS 8.1, Oracle Engineering)
- [CVE-2021-2403](https://cve.now/CVE-2021-2403.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 5.3, Oracle WebLogic Server)
- [CVE-2021-2402](https://cve.now/CVE-2021-2402.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2401](https://cve.now/CVE-2021-2401.md): Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). (CVSS 5.3, Oracle BI Publisher)
- [CVE-2021-2400](https://cve.now/CVE-2021-2400.md): Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). (CVSS 7.5, Oracle BI Publisher)
- [CVE-2021-2399](https://cve.now/CVE-2021-2399.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2398](https://cve.now/CVE-2021-2398.md): Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Region Mapping). (CVSS 8.1, Oracle Advanced Outbound Telephony)
- [CVE-2021-2397](https://cve.now/CVE-2021-2397.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2021-2396](https://cve.now/CVE-2021-2396.md): Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). (CVSS 8.8, Oracle BI Publisher)
- [CVE-2021-2395](https://cve.now/CVE-2021-2395.md): Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: iCare, Configur (CVSS 8.1, Oracle Hospitality Reporting and Analytics)
- [CVE-2021-2394](https://cve.now/CVE-2021-2394.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2021-2393](https://cve.now/CVE-2021-2393.md): Vulnerability in the Oracle E-Records product of Oracle E-Business Suite (component: E-signatures). (CVSS 8.1, Oracle E-Records)
- [CVE-2021-2392](https://cve.now/CVE-2021-2392.md): Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). (CVSS 8.8, Oracle BI Publisher)
- [CVE-2021-2391](https://cve.now/CVE-2021-2391.md): Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Scheduler). (CVSS 8.8, Oracle BI Publisher)
- [CVE-2021-2390](https://cve.now/CVE-2021-2390.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 5.9, Oracle MySQL Server)
- [CVE-2021-2388](https://cve.now/CVE-2021-2388.md): Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). (CVSS 7.5, Oracle Java SE JDK and JRE)
- [CVE-2021-2389](https://cve.now/CVE-2021-2389.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 5.9, Oracle MySQL Server)
- [CVE-2021-2387](https://cve.now/CVE-2021-2387.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2386](https://cve.now/CVE-2021-2386.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Acc (CVSS 4.3, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2021-2385](https://cve.now/CVE-2021-2385.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). (CVSS 5.0, Oracle MySQL Server)
- [CVE-2021-2384](https://cve.now/CVE-2021-2384.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2383](https://cve.now/CVE-2021-2383.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2382](https://cve.now/CVE-2021-2382.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Security). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2021-2381](https://cve.now/CVE-2021-2381.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). (CVSS 3.9, Oracle Solaris Operating System)
- [CVE-2021-2380](https://cve.now/CVE-2021-2380.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). (CVSS 7.6, Oracle Applications Framework)
- [CVE-2021-2378](https://cve.now/CVE-2021-2378.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle WebLogic Server)
- [CVE-2021-2377](https://cve.now/CVE-2021-2377.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). (CVSS 4.3, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2021-2376](https://cve.now/CVE-2021-2376.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). (CVSS 7.5, Oracle WebLogic Server)
- [CVE-2021-2375](https://cve.now/CVE-2021-2375.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime). (CVSS 6.1, Oracle JD Edwards EnterpriseOne Tools)
- [CVE-2021-2374](https://cve.now/CVE-2021-2374.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.1, Oracle MySQL Server)
- [CVE-2021-2372](https://cve.now/CVE-2021-2372.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2021-2373](https://cve.now/CVE-2021-2373.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime). (CVSS 5.4, Oracle JD Edwards EnterpriseOne Tools)
- [CVE-2021-2371](https://cve.now/CVE-2021-2371.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle Coherence)
- [CVE-2021-2370](https://cve.now/CVE-2021-2370.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2368](https://cve.now/CVE-2021-2368.md): Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: Siebel Core - Server Infrastructure). (CVSS 5.9, Oracle Siebel Core - Server Framework)
- [CVE-2021-2367](https://cve.now/CVE-2021-2367.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2366](https://cve.now/CVE-2021-2366.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Acc (CVSS 6.4, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2021-2365](https://cve.now/CVE-2021-2365.md): Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: People Management). (CVSS 8.1, Oracle Human Resources)
- [CVE-2021-2364](https://cve.now/CVE-2021-2364.md): Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Accounts). (CVSS 8.1, Oracle iSupplier Portal)
- [CVE-2021-2363](https://cve.now/CVE-2021-2363.md): Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). (CVSS 8.1, Oracle Public Sector Financials)
- [CVE-2021-2362](https://cve.now/CVE-2021-2362.md): Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Wireless). (CVSS 8.1, Oracle Field Service)
- [CVE-2021-2361](https://cve.now/CVE-2021-2361.md): Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: SDK client integration). (CVSS 8.1, Oracle Advanced Inbound Telephony)
- [CVE-2021-2360](https://cve.now/CVE-2021-2360.md): Vulnerability in the Oracle Approvals Management product of Oracle E-Business Suite (component: AME Page rendering). (CVSS 8.1, Oracle Approvals Management)
- [CVE-2021-2358](https://cve.now/CVE-2021-2358.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Rest interfaces for Access Mgr). (CVSS 4.9, Oracle Access Manager)
- [CVE-2021-2359](https://cve.now/CVE-2021-2359.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2021-2357](https://cve.now/CVE-2021-2357.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2356](https://cve.now/CVE-2021-2356.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). (CVSS 5.9, Oracle MySQL Server)
- [CVE-2021-2355](https://cve.now/CVE-2021-2355.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 9.1, Oracle Marketing)
- [CVE-2021-2354](https://cve.now/CVE-2021-2354.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2353](https://cve.now/CVE-2021-2353.md): Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Loging). (CVSS 4.4, Oracle Siebel Core - Server Framework)
- [CVE-2021-2352](https://cve.now/CVE-2021-2352.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2351](https://cve.now/CVE-2021-2351.md): Vulnerability in the Advanced Networking Option component of Oracle Database Server. (CVSS 8.3, Oracle WebLogic Server)
- [CVE-2021-2350](https://cve.now/CVE-2021-2350.md): Vulnerability in the Hyperion Essbase Administration Services product of Oracle Essbase (component: EAS Console). (CVSS 7.5, Oracle Hyperion Essbase Administration Services)
- [CVE-2021-2349](https://cve.now/CVE-2021-2349.md): Vulnerability in the Hyperion Essbase Administration Services product of Oracle Essbase (component: EAS Console). (CVSS 8.6, Oracle Hyperion Essbase Administration Services)
- [CVE-2021-2348](https://cve.now/CVE-2021-2348.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and Fra (CVSS 4.3, Commerce Guided Search / Oracle Commerce Experience Manager)
- [CVE-2021-2347](https://cve.now/CVE-2021-2347.md): Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). (CVSS 5.2, Oracle Hyperion Infrastructure Technology)
- [CVE-2021-2346](https://cve.now/CVE-2021-2346.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and Fra (CVSS 5.4, Commerce Guided Search / Oracle Commerce Experience Manager)
- [CVE-2021-2345](https://cve.now/CVE-2021-2345.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and Fra (CVSS 5.4, Commerce Guided Search / Oracle Commerce Experience Manager)
- [CVE-2021-2343](https://cve.now/CVE-2021-2343.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 4.3, Oracle Workflow)
- [CVE-2021-2344](https://cve.now/CVE-2021-2344.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle Coherence)
- [CVE-2021-2342](https://cve.now/CVE-2021-2342.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2341](https://cve.now/CVE-2021-2341.md): Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). (CVSS 3.1, Oracle Java SE JDK and JRE)
- [CVE-2021-2340](https://cve.now/CVE-2021-2340.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached). (CVSS 2.7, Oracle MySQL Server)
- [CVE-2021-2339](https://cve.now/CVE-2021-2339.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2338](https://cve.now/CVE-2021-2338.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing Stand-Alone). (CVSS 6.1, Oracle Siebel Apps - Marketing)
- [CVE-2021-2337](https://cve.now/CVE-2021-2337.md): Vulnerability in the Oracle XML DB component of Oracle Database Server. (CVSS 7.2, Oracle Database - Enterprise Edition)
- [CVE-2021-2336](https://cve.now/CVE-2021-2336.md): Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. (CVSS 3.5, Oracle Database - Enterprise Edition)
- [CVE-2021-2335](https://cve.now/CVE-2021-2335.md): Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. (CVSS 3.5, Oracle Database - Enterprise Edition)
- [CVE-2021-2333](https://cve.now/CVE-2021-2333.md): Vulnerability in the Oracle XML DB component of Oracle Database Server. (CVSS 4.9, Oracle Database - Enterprise Edition)
- [CVE-2021-2334](https://cve.now/CVE-2021-2334.md): Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. (CVSS 3.5, Oracle Database - Enterprise Edition)
- [CVE-2021-2330](https://cve.now/CVE-2021-2330.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (CVSS 4.3, Oracle Database - Enterprise Edition)
- [CVE-2021-2329](https://cve.now/CVE-2021-2329.md): Vulnerability in the Oracle XML DB component of Oracle Database Server. (CVSS 7.2, Oracle Database - Enterprise Edition)
- [CVE-2021-2328](https://cve.now/CVE-2021-2328.md): Vulnerability in the Oracle Text component of Oracle Database Server. (CVSS 7.2, Oracle Text)
- [CVE-2021-2326](https://cve.now/CVE-2021-2326.md): Vulnerability in the Database Vault component of Oracle Database Server. (CVSS 2.7, Oracle Database - Enterprise Edition)
- [CVE-2021-2324](https://cve.now/CVE-2021-2324.md): Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Loans And Deposits). (CVSS 4.6, Oracle FLEXCUBE Universal Banking)
- [CVE-2021-2323](https://cve.now/CVE-2021-2323.md): Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Flex-Branch). (CVSS 5.9, Oracle FLEXCUBE Universal Banking)
- [CVE-2021-36230](https://cve.now/CVE-2021-36230.md): HashiCorp Terraform Enterprise releases up to v202106-1 did not properly perform authorization checks on a subset of API requests executed u (no CVSS)
- [CVE-2021-36746](https://cve.now/CVE-2021-36746.md): Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor. (no CVSS)
- [CVE-2021-36747](https://cve.now/CVE-2021-36747.md): Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form. (no CVSS)
- [CVE-2020-23284](https://cve.now/CVE-2020-23284.md): Information disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to copy and paste aspx pages in the end of the URL app (no CVSS)
- [CVE-2020-25206](https://cve.now/CVE-2020-25206.md): The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, Phy (no CVSS)
- [CVE-2020-25205](https://cve.now/CVE-2020-25205.md): The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 is vulnerable to stored XSS in the set\_banner() function of /var/www/co (no CVSS)
- [CVE-2021-33910](https://cve.now/CVE-2021-33910.md): basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdup (CVSS 5.5)
- [CVE-2021-33909](https://cve.now/CVE-2021-33909.md): fs/seq\_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer (no CVSS)
- [CVE-2021-20478](https://cve.now/CVE-2021-20478.md): IBM Cloud Pak System 2.3 could allow a local user in some situations to view the artifacts of another user in self service console. (CVSS 4.0, IBM Cloud Pak System)
- [CVE-2021-32763](https://cve.now/CVE-2021-32763.md): Regular Expression Denial of Service in OpenProject forum messages (CVSS 4.3, opf openproject)
- [CVE-2021-32767](https://cve.now/CVE-2021-32767.md): Information Disclosure in User Authentication (CVSS 5.3, TYPO3.CMS · typo3/cms-core +1)
- [CVE-2021-32669](https://cve.now/CVE-2021-32669.md): Cross-Site Scripting in Backend Grid View (CVSS 6.4, TYPO3.CMS · typo3/cms-core +1)
- [CVE-2021-32668](https://cve.now/CVE-2021-32668.md): Cross-Site Scripting in Query Generator & Query View (CVSS 6.4, TYPO3.CMS · typo3/cms-core +1)
- [CVE-2021-32667](https://cve.now/CVE-2021-32667.md): Cross-Site Scripting in Page Preview (CVSS 6.4, TYPO3.CMS · typo3/cms-core +1)
- [CVE-2020-35427](https://cve.now/CVE-2020-35427.md): SQL injection vulnerability in PHPGurukul Employee Record Management System 1.1 allows remote attackers to execute arbitrary SQL commands an (no CVSS)
- [CVE-2021-27338](https://cve.now/CVE-2021-27338.md): Faraday Edge before 3.7 allows XSS via the network/create/ page and its network name parameter. (no CVSS)
- [CVE-2021-27517](https://cve.now/CVE-2021-27517.md): Foxit PDF SDK For Web through 7.5.0 allows XSS. (no CVSS)
- [CVE-2020-15660](https://cve.now/CVE-2020-15660.md): Missing checks on Content-Type headers in geckodriver before 0.27.0 could lead to a CSRF vulnerability, that might, when paired with a speci (no CVSS)
- [CVE-2021-32463](https://cve.now/CVE-2021-32463.md): An incorrect permission assignment denial-of-service vulnerability in Trend Micro Apex One, Apex One as a Service (SaaS), Worry-Free Busines (no CVSS, Trend Micro Apex One · Trend Micro Worry-Free Business Secu…)
- [CVE-2021-26095](https://cve.now/CVE-2021-26095.md): The combination of various cryptographic issues in the session management of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6, includin (CVSS 7.5, Fortinet FortiMail)
- [CVE-2021-27021](https://cve.now/CVE-2021-27021.md): A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query (no CVSS, Puppet DB)
- [CVE-2021-24022](https://cve.now/CVE-2021-24022.md): A buffer overflow vulnerability in FortiAnalyzer CLI 6.4.5 and below, 6.2.7 and below, 6.0.x and FortiManager CLI 6.4.5 and below, 6.2.7 and (CVSS 6.7, Fortinet FortiAnalyzer, FortiManager)
- [CVE-2021-22125](https://cve.now/CVE-2021-22125.md): An instance of improper neutralization of special elements in the sniffer module of FortiSandbox before 3.2.2 may allow an authenticated adm (CVSS 6.3, Fortinet FortiSandbox)
- [CVE-2020-7866](https://cve.now/CVE-2020-7866.md): Tobesoft XPLATFORM Arbitrary Command Execution Vulnerability (CVSS 8.8, Tobesoft XPLATFORM)
- [CVE-2021-35054](https://cve.now/CVE-2021-35054.md): Minecraft before 1.17.1, when online-mode=false is configured, allows path traversal for deletion of arbitrary JSON files. (no CVSS)
- [CVE-2021-36976](https://cve.now/CVE-2021-36976.md): libarchive 3.4.1 through 3.5.1 has a use-after-free in copy\_string (called from do\_uncompress\_block and process\_block). (no CVSS)
- [CVE-2021-36977](https://cve.now/CVE-2021-36977.md): matio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MM\_memcpy (called from H5MM\_malloc and H5C\_load\_ent (no CVSS)
- [CVE-2021-36979](https://cve.now/CVE-2021-36979.md): Unicorn Engine 1.0.2 has an out-of-bounds write in tb\_flush\_armeb (called from cpu\_arm\_exec\_armeb and tcg\_cpu\_exec\_armeb). (no CVSS)
- [CVE-2020-36428](https://cve.now/CVE-2020-36428.md): matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data an (no CVSS)
- [CVE-2020-36429](https://cve.now/CVE-2020-36429.md): Variant\_encodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth. (no CVSS)
- [CVE-2020-36430](https://cve.now/CVE-2020-36430.md): libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode\_chars (called from decode\_font and process\_text) because the wrong in (no CVSS)
- [CVE-2020-36431](https://cve.now/CVE-2020-36431.md): Unicorn Engine 1.0.2 has an out-of-bounds write in helper\_wfe\_arm. (no CVSS)
- [CVE-2019-25050](https://cve.now/CVE-2019-25050.md): netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4\_get\_att (called from nc4\_get\_att\_tc and nc\_get\_att\_text) and in (no CVSS, gdal)
- [CVE-2019-25051](https://cve.now/CVE-2019-25051.md): objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup\_top (called from acommon::StringMap::add and acommo (no CVSS)
- [CVE-2021-26083](https://cve.now/CVE-2021-26083.md): Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8 (no CVSS, Atlassian Jira Server · Atlassian Jira Data Center)
- [CVE-2021-26082](https://cve.now/CVE-2021-26082.md): The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14. (no CVSS, Atlassian Jira Server · Atlassian Jira Data Center)
- [CVE-2021-26081](https://cve.now/CVE-2021-26081.md): REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 befo (CVSS 5.3, Atlassian Jira Server · Atlassian Jira Data Center)
- [CVE-2021-32774](https://cve.now/CVE-2021-32774.md): Cross-Site Request Forgery (CSRF) in DataDump (CVSS 6.1, miraheze DataDump)
- [CVE-2021-22235](https://cve.now/CVE-2021-22235.md): Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file (CVSS 7.5, The Wireshark Foundation Wireshark)
- [CVE-2021-2369](https://cve.now/CVE-2021-2369.md): Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Library). (CVSS 4.3, Oracle Java SE JDK and JRE)
- [CVE-2021-3246](https://cve.now/CVE-2021-3246.md): A heap buffer overflow vulnerability in msadpcm\_decode\_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted W (no CVSS)
- [CVE-2021-36978](https://cve.now/CVE-2021-36978.md): QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in Pl\_ASCII85Decoder::write (called from Pl\_AES\_PDF::flush a (no CVSS)
- [CVE-2021-36980](https://cve.now/CVE-2021-36980.md): Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode\_NXAST\_RAW\_ENCAP (called from ofpact\_decode and ofpacts\_d (CVSS 5.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-07-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.