# CVEs published 2021-10-20

191 CVEs were published on October 20, 2021: 3 critical, 64 high. Days are UTC.

- [CVE-2021-41163](https://cve.now/CVE-2021-41163.md): RCE via malicious SNS subscription payload (CVSS 10.0, discourse)
- [CVE-2021-42299](https://cve.now/CVE-2021-42299.md): Microsoft Surface Pro 3 Security Feature Bypass Vulnerability (CVSS 5.6, Microsoft Surface Pro)
- [CVE-2021-42771](https://cve.now/CVE-2021-42771.md): Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory (no CVSS, babel)
- [CVE-2021-42764](https://cve.now/CVE-2021-42764.md): The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service (delayed consensus (no CVSS)
- [CVE-2021-42765](https://cve.now/CVE-2021-42765.md): The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to leverage network delay to cause a denial of s (no CVSS)
- [CVE-2021-42766](https://cve.now/CVE-2021-42766.md): The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service (long-range consens (no CVSS)
- [CVE-2021-38896](https://cve.now/CVE-2021-38896.md): IBM QRadar Advisor 2.5 through 2.6.1 is vulnerable to cross-site scripting. (CVSS 6.1, IBM Qradar Advisor)
- [CVE-2021-41167](https://cve.now/CVE-2021-41167.md): Unlimited requests in modern-async (CVSS 7.5, nicolas-van modern-async · modern-async)
- [CVE-2021-42762](https://cve.now/CVE-2021-42762.md): BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick ho (no CVSS)
- [CVE-2021-41135](https://cve.now/CVE-2021-41135.md): Authz Module Non-Determinism (CVSS 6.5, cosmos-sdk · github.com/cosmos/cosmos-sdk)
- [CVE-2021-21748](https://cve.now/CVE-2021-21748.md): ZTE MF971R product has two stack-based buffer overflow vulnerabilities. (no CVSS, MF971R)
- [CVE-2021-21749](https://cve.now/CVE-2021-21749.md): ZTE MF971R product has two stack-based buffer overflow vulnerabilities. (no CVSS, MF971R)
- [CVE-2021-21745](https://cve.now/CVE-2021-21745.md): ZTE MF971R product has a Referer authentication bypass vulnerability. (no CVSS, MF971R)
- [CVE-2021-21743](https://cve.now/CVE-2021-21743.md): ZTE MF971R product has a CRLF injection vulnerability. (no CVSS, MF971R)
- [CVE-2021-21744](https://cve.now/CVE-2021-21744.md): ZTE MF971R product has a configuration file control vulnerability. (no CVSS, MF971R)
- [CVE-2021-21747](https://cve.now/CVE-2021-21747.md): ZTE MF971R product has reflective XSS vulnerability. (no CVSS, MF971R)
- [CVE-2021-21746](https://cve.now/CVE-2021-21746.md): ZTE MF971R product has reflective XSS vulnerability. (no CVSS, MF971R)
- [CVE-2021-23452](https://cve.now/CVE-2021-23452.md): Prototype Pollution (CVSS 8.6, x-assign)
- [CVE-2021-25972](https://cve.now/CVE-2021-25972.md): Camaleon CMS - Server-Side Request Forgery (SSRF) in Media Upload Feature (CVSS 4.9, camaleon\_cms)
- [CVE-2021-25971](https://cve.now/CVE-2021-25971.md): Camaleon CMS - SVG File Upload Creates DoS for Media Upload Feature (CVSS 4.3, camaleon\_cms)
- [CVE-2021-25970](https://cve.now/CVE-2021-25970.md): Camaleon CMS - Insufficient Session Expiration after Password Change (CVSS 8.8, camaleon\_cms)
- [CVE-2021-25969](https://cve.now/CVE-2021-25969.md): Camaleon CMS - Stored Cross-Site Scripting (XSS) in Comments (CVSS 6.1, camaleon\_cms)
- [CVE-2021-35666](https://cve.now/CVE-2021-35666.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). (CVSS 5.9, Oracle HTTP Server)
- [CVE-2021-35665](https://cve.now/CVE-2021-35665.md): Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Repository). (CVSS 6.1, Oracle Hyperion Financial Reporting)
- [CVE-2021-35662](https://cve.now/CVE-2021-35662.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-35661](https://cve.now/CVE-2021-35661.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-35660](https://cve.now/CVE-2021-35660.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-35659](https://cve.now/CVE-2021-35659.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-35658](https://cve.now/CVE-2021-35658.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-35657](https://cve.now/CVE-2021-35657.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-35655](https://cve.now/CVE-2021-35655.md): Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). (CVSS 5.3, Oracle Hyperion Essbase Administration Services)
- [CVE-2021-35656](https://cve.now/CVE-2021-35656.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-35654](https://cve.now/CVE-2021-35654.md): Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). (CVSS 7.5, Oracle Hyperion Essbase Administration Services)
- [CVE-2021-35653](https://cve.now/CVE-2021-35653.md): Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). (CVSS 7.7, Oracle Hyperion Essbase Administration Services)
- [CVE-2021-35652](https://cve.now/CVE-2021-35652.md): Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). (CVSS 10.0, Oracle Hyperion Essbase Administration Services)
- [CVE-2021-35651](https://cve.now/CVE-2021-35651.md): Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). (CVSS 8.5, Oracle Hyperion Essbase Administration Services)
- [CVE-2021-35650](https://cve.now/CVE-2021-35650.md): Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). (CVSS 4.6, Oracle Secure Global Desktop)
- [CVE-2021-35649](https://cve.now/CVE-2021-35649.md): Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). (CVSS 5.4, Oracle Secure Global Desktop)
- [CVE-2021-35648](https://cve.now/CVE-2021-35648.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35647](https://cve.now/CVE-2021-35647.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35646](https://cve.now/CVE-2021-35646.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35645](https://cve.now/CVE-2021-35645.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35644](https://cve.now/CVE-2021-35644.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35643](https://cve.now/CVE-2021-35643.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35642](https://cve.now/CVE-2021-35642.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35641](https://cve.now/CVE-2021-35641.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35639](https://cve.now/CVE-2021-35639.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35640](https://cve.now/CVE-2021-35640.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). (CVSS 2.7, Oracle MySQL Server)
- [CVE-2021-35638](https://cve.now/CVE-2021-35638.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35637](https://cve.now/CVE-2021-35637.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35636](https://cve.now/CVE-2021-35636.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35635](https://cve.now/CVE-2021-35635.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35634](https://cve.now/CVE-2021-35634.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35633](https://cve.now/CVE-2021-35633.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging). (CVSS 2.7, Oracle MySQL Server)
- [CVE-2021-35632](https://cve.now/CVE-2021-35632.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2021-35631](https://cve.now/CVE-2021-35631.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35630](https://cve.now/CVE-2021-35630.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35629](https://cve.now/CVE-2021-35629.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35628](https://cve.now/CVE-2021-35628.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35627](https://cve.now/CVE-2021-35627.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35626](https://cve.now/CVE-2021-35626.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35625](https://cve.now/CVE-2021-35625.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 2.7, Oracle MySQL Server)
- [CVE-2021-35624](https://cve.now/CVE-2021-35624.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35623](https://cve.now/CVE-2021-35623.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). (CVSS 2.7, Oracle MySQL Server)
- [CVE-2021-35621](https://cve.now/CVE-2021-35621.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster)
- [CVE-2021-35622](https://cve.now/CVE-2021-35622.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35620](https://cve.now/CVE-2021-35620.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle WebLogic Server)
- [CVE-2021-35619](https://cve.now/CVE-2021-35619.md): Vulnerability in the Java VM component of Oracle Database Server. (CVSS 7.1, Oracle Database - Enterprise Edition)
- [CVE-2021-35618](https://cve.now/CVE-2021-35618.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 1.8, Oracle MySQL Cluster)
- [CVE-2021-35617](https://cve.now/CVE-2021-35617.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2021-35616](https://cve.now/CVE-2021-35616.md): Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure). (CVSS 5.4, Oracle Transportation Management)
- [CVE-2021-35613](https://cve.now/CVE-2021-35613.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 3.7, Oracle MySQL Cluster)
- [CVE-2021-35612](https://cve.now/CVE-2021-35612.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 5.5, Oracle MySQL Server)
- [CVE-2021-35610](https://cve.now/CVE-2021-35610.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 7.1, Oracle MySQL Server)
- [CVE-2021-35611](https://cve.now/CVE-2021-35611.md): Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Offline Template). (CVSS 4.3, Oracle Sales Offline)
- [CVE-2021-35609](https://cve.now/CVE-2021-35609.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). (CVSS 6.5, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2021-35608](https://cve.now/CVE-2021-35608.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). (CVSS 5.3, Oracle MySQL Server)
- [CVE-2021-35607](https://cve.now/CVE-2021-35607.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2021-35606](https://cve.now/CVE-2021-35606.md): Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Notification Framework). (CVSS 5.7, Oracle PeopleSoft Enterprise CS Campus Community)
- [CVE-2021-35604](https://cve.now/CVE-2021-35604.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 5.5, Oracle MySQL Server)
- [CVE-2021-35603](https://cve.now/CVE-2021-35603.md): Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). (CVSS 3.7, Oracle Java SE JDK and JRE)
- [CVE-2021-35601](https://cve.now/CVE-2021-35601.md): Vulnerability in the PeopleSoft Enterprise CS SA Integration Pack product of Oracle PeopleSoft (component: Students Administration). (CVSS 5.7, Oracle PeopleSoft Enterprise CS SA Integration Pack)
- [CVE-2021-35602](https://cve.now/CVE-2021-35602.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). (CVSS 5.0, Oracle MySQL Server)
- [CVE-2021-35599](https://cve.now/CVE-2021-35599.md): Vulnerability in the Zero Downtime DB Migration to Cloud component of Oracle Database Server. (CVSS 8.2, Oracle Database - Enterprise Edition)
- [CVE-2021-35598](https://cve.now/CVE-2021-35598.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster)
- [CVE-2021-35597](https://cve.now/CVE-2021-35597.md): Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2021-35596](https://cve.now/CVE-2021-35596.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Error Handling). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35595](https://cve.now/CVE-2021-35595.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2021-35594](https://cve.now/CVE-2021-35594.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster)
- [CVE-2021-35593](https://cve.now/CVE-2021-35593.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster)
- [CVE-2021-35592](https://cve.now/CVE-2021-35592.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster)
- [CVE-2021-35590](https://cve.now/CVE-2021-35590.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster)
- [CVE-2021-35591](https://cve.now/CVE-2021-35591.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35589](https://cve.now/CVE-2021-35589.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device drivers). (CVSS 6.0, Oracle Solaris Operating System)
- [CVE-2021-35588](https://cve.now/CVE-2021-35588.md): Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). (CVSS 3.1, Oracle Java SE JDK and JRE)
- [CVE-2021-35586](https://cve.now/CVE-2021-35586.md): Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). (CVSS 5.3, Oracle Java SE JDK and JRE)
- [CVE-2021-35585](https://cve.now/CVE-2021-35585.md): Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite (component: User Interface). (CVSS 8.1, Oracle Incentive Compensation)
- [CVE-2021-35584](https://cve.now/CVE-2021-35584.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: ndbcluster/plugin DDL). (CVSS 4.3, Oracle MySQL Cluster)
- [CVE-2021-35583](https://cve.now/CVE-2021-35583.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Windows). (CVSS 7.5, Oracle MySQL Server)
- [CVE-2021-35581](https://cve.now/CVE-2021-35581.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). (CVSS 4.7, Oracle Applications Manager)
- [CVE-2021-35582](https://cve.now/CVE-2021-35582.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). (CVSS 6.5, Oracle Applications Manager)
- [CVE-2021-35580](https://cve.now/CVE-2021-35580.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). (CVSS 6.1, Oracle Applications Manager)
- [CVE-2021-35578](https://cve.now/CVE-2021-35578.md): Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). (CVSS 5.3, Oracle Java SE JDK and JRE)
- [CVE-2021-35577](https://cve.now/CVE-2021-35577.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35575](https://cve.now/CVE-2021-35575.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35574](https://cve.now/CVE-2021-35574.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-35573](https://cve.now/CVE-2021-35573.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-35571](https://cve.now/CVE-2021-35571.md): Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft (component: Advising Notes). (CVSS 5.4, Oracle PeopleSoft Enterprise CS Academic Advisement)
- [CVE-2021-35572](https://cve.now/CVE-2021-35572.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.5, Oracle Outside In Technology)
- [CVE-2021-35570](https://cve.now/CVE-2021-35570.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). (CVSS 8.1, Oracle Mobile Field Service)
- [CVE-2021-35569](https://cve.now/CVE-2021-35569.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). (CVSS 4.9, Oracle Applications Manager)
- [CVE-2021-35568](https://cve.now/CVE-2021-35568.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2021-35567](https://cve.now/CVE-2021-35567.md): Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). (CVSS 6.8, Oracle Java SE JDK and JRE)
- [CVE-2021-35566](https://cve.now/CVE-2021-35566.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). (CVSS 8.1, Oracle Applications Manager)
- [CVE-2021-35565](https://cve.now/CVE-2021-35565.md): Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). (CVSS 5.3, Oracle Java SE JDK and JRE)
- [CVE-2021-35564](https://cve.now/CVE-2021-35564.md): Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). (CVSS 5.3, Oracle Java SE JDK and JRE)
- [CVE-2021-35563](https://cve.now/CVE-2021-35563.md): Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). (CVSS 8.1, Oracle Shipping Execution)
- [CVE-2021-35561](https://cve.now/CVE-2021-35561.md): Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). (CVSS 5.3, Oracle Java SE JDK and JRE)
- [CVE-2021-35562](https://cve.now/CVE-2021-35562.md): Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). (CVSS 8.1, Oracle Universal Work Queue)
- [CVE-2021-35560](https://cve.now/CVE-2021-35560.md): Vulnerability in the Java SE product of Oracle Java SE (component: Deployment). (CVSS 7.5, Oracle Java SE JDK and JRE)
- [CVE-2021-35559](https://cve.now/CVE-2021-35559.md): Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). (CVSS 5.3, Oracle Java SE JDK and JRE)
- [CVE-2021-35558](https://cve.now/CVE-2021-35558.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (CVSS 4.3, Oracle Database - Enterprise Edition)
- [CVE-2021-35557](https://cve.now/CVE-2021-35557.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (CVSS 4.3, Oracle Database - Enterprise Edition)
- [CVE-2021-35556](https://cve.now/CVE-2021-35556.md): Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). (CVSS 5.3, Oracle Java SE JDK and JRE)
- [CVE-2021-35554](https://cve.now/CVE-2021-35554.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). (CVSS 5.3, Oracle Trade Management)
- [CVE-2021-35553](https://cve.now/CVE-2021-35553.md): Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Class Search). (CVSS 5.4, Oracle PeopleSoft Enterprise CS Student Records)
- [CVE-2021-35552](https://cve.now/CVE-2021-35552.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Diagnostics). (CVSS 5.3, Oracle WebLogic Server)
- [CVE-2021-35551](https://cve.now/CVE-2021-35551.md): Vulnerability in the RDBMS Security component of Oracle Database Server. (CVSS 5.5, Oracle Database - Enterprise Edition)
- [CVE-2021-35550](https://cve.now/CVE-2021-35550.md): Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). (CVSS 5.9, Oracle Java SE JDK and JRE)
- [CVE-2021-35549](https://cve.now/CVE-2021-35549.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). (CVSS 3.9, Oracle Solaris Operating System)
- [CVE-2021-35545](https://cve.now/CVE-2021-35545.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.7, Oracle VM VirtualBox)
- [CVE-2021-35546](https://cve.now/CVE-2021-35546.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-35543](https://cve.now/CVE-2021-35543.md): Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Activity Guide Composer). (CVSS 8.1, Oracle PeopleSoft Enterprise CC Common Application Objects)
- [CVE-2021-35542](https://cve.now/CVE-2021-35542.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 4.4, Oracle VM VirtualBox)
- [CVE-2021-35541](https://cve.now/CVE-2021-35541.md): Vulnerability in the PeopleSoft Enterprise SCM product of Oracle PeopleSoft (component: Supplier Portal). (CVSS 5.4, Oracle PeopleSoft Enterprise SCM Purchasing)
- [CVE-2021-35540](https://cve.now/CVE-2021-35540.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.5, Oracle VM VirtualBox)
- [CVE-2021-35539](https://cve.now/CVE-2021-35539.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). (CVSS 6.5, Oracle Solaris Operating System)
- [CVE-2021-35538](https://cve.now/CVE-2021-35538.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.8, Oracle VM VirtualBox)
- [CVE-2021-35537](https://cve.now/CVE-2021-35537.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2485](https://cve.now/CVE-2021-2485.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). (CVSS 8.1, Oracle Trade Management)
- [CVE-2021-35536](https://cve.now/CVE-2021-35536.md): Vulnerability in the Oracle Deal Management product of Oracle E-Business Suite (component: Miscellaneous). (CVSS 8.1, Oracle Deal Management)
- [CVE-2021-2484](https://cve.now/CVE-2021-2484.md): Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite (component: BIS Operations Intelligence). (CVSS 8.1, Oracle Operations Intelligence)
- [CVE-2021-2483](https://cve.now/CVE-2021-2483.md): Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Content Item Manager). (CVSS 8.1, Oracle Content Manager)
- [CVE-2021-2482](https://cve.now/CVE-2021-2482.md): Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Invoice Approvals). (CVSS 8.1, Oracle Payables)
- [CVE-2021-2481](https://cve.now/CVE-2021-2481.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2021-2480](https://cve.now/CVE-2021-2480.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). (CVSS 3.7, Oracle HTTP Server)
- [CVE-2021-2479](https://cve.now/CVE-2021-2479.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2477](https://cve.now/CVE-2021-2477.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management). (CVSS 5.3, Oracle Applications Framework)
- [CVE-2021-2478](https://cve.now/CVE-2021-2478.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2021-2476](https://cve.now/CVE-2021-2476.md): Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Authentication). (CVSS 5.3, Oracle Transportation Management)
- [CVE-2021-2475](https://cve.now/CVE-2021-2475.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 4.4, Oracle VM VirtualBox)
- [CVE-2021-2474](https://cve.now/CVE-2021-2474.md): Vulnerability in the Oracle Web Analytics product of Oracle E-Business Suite (component: Admin). (CVSS 8.1, Oracle Web Analytics)
- [CVE-2021-2471](https://cve.now/CVE-2021-2471.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). (CVSS 5.9, Oracle MySQL Connectors · mysql:mysql-connector-java)
- [CVE-2021-2461](https://cve.now/CVE-2021-2461.md): Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications (component: Provision API). (CVSS 8.3, Oracle Communications Interactive Session Recorder)
- [CVE-2021-2416](https://cve.now/CVE-2021-2416.md): Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications (component: Routing). (CVSS 4.9, Oracle Communications Session Border Controller)
- [CVE-2021-2414](https://cve.now/CVE-2021-2414.md): Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications (component: Routing). (CVSS 6.8, Oracle Communications Session Border Controller)
- [CVE-2021-2332](https://cve.now/CVE-2021-2332.md): Vulnerability in the Oracle LogMiner component of Oracle Database Server. (CVSS 6.7, Oracle Database - Enterprise Edition)
- [CVE-2021-2137](https://cve.now/CVE-2021-2137.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework). (CVSS 8.8, Oracle Enterprise Manager Base Platform)
- [CVE-2021-30316](https://cve.now/CVE-2021-30316.md): Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, S (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…)
- [CVE-2021-30315](https://cve.now/CVE-2021-30315.md): Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon Auto (CVSS 8.4, Qualcomm Snapdragon Auto)
- [CVE-2021-30312](https://cve.now/CVE-2021-30312.md): Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30310](https://cve.now/CVE-2021-30310.md): Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…)
- [CVE-2021-30306](https://cve.now/CVE-2021-30306.md): Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivi (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…)
- [CVE-2021-30305](https://cve.now/CVE-2021-30305.md): Possible out of bound access due to lack of validation of page offset before page is inserted in Snapdragon Auto, Snapdragon Connectivity, S (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…)
- [CVE-2021-30304](https://cve.now/CVE-2021-30304.md): Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdra (CVSS 7.5, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2021-30302](https://cve.now/CVE-2021-30302.md): Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdra (CVSS 7.5, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2021-30297](https://cve.now/CVE-2021-30297.md): Possible out of bound read due to improper validation of packet length while handling data transfer in VR service in Snapdragon Auto, Snapdr (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30292](https://cve.now/CVE-2021-30292.md): Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapd (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30291](https://cve.now/CVE-2021-30291.md): Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapd (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30288](https://cve.now/CVE-2021-30288.md): Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon C (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30258](https://cve.now/CVE-2021-30258.md): Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdragon Compute, Snapdrag (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30257](https://cve.now/CVE-2021-30257.md): Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connec (CVSS 8.4, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2021-30256](https://cve.now/CVE-2021-30256.md): Possible stack overflow due to improper validation of camera name length before copying the name in VR Service in Snapdragon Compute, Snapdr (CVSS 8.4, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2021-1985](https://cve.now/CVE-2021-1985.md): Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon C (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1984](https://cve.now/CVE-2021-1984.md): Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdragon Compute, (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1983](https://cve.now/CVE-2021-1983.md): Possible buffer overflow due to improper handling of negative data length while processing write request in VR service in Snapdragon Auto, S (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1980](https://cve.now/CVE-2021-1980.md): Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon Co (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1977](https://cve.now/CVE-2021-1977.md): Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Au (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1967](https://cve.now/CVE-2021-1967.md): Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN Match even (CVSS 5.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1966](https://cve.now/CVE-2021-1966.md): Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto, Snapdragon Compute, (CVSS 6.7, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1959](https://cve.now/CVE-2021-1959.md): Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1949](https://cve.now/CVE-2021-1949.md): Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snap (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1936](https://cve.now/CVE-2021-1936.md): Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1932](https://cve.now/CVE-2021-1932.md): Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1917](https://cve.now/CVE-2021-1917.md): Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1913](https://cve.now/CVE-2021-1913.md): Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11303](https://cve.now/CVE-2020-11303.md): Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Conn (CVSS 8.6, Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…)
- [CVE-2021-1968](https://cve.now/CVE-2021-1968.md): Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to (CVSS 6.2, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1969](https://cve.now/CVE-2021-1969.md): Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to (CVSS 6.2, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-35576](https://cve.now/CVE-2021-35576.md): Vulnerability in the Oracle Database Enterprise Edition Unified Audit component of Oracle Database Server. (CVSS 2.7, Oracle Database - Enterprise Edition)
- [CVE-2021-42739](https://cve.now/CVE-2021-42739.md): The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-10-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.