Archive

20 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /20 February 2021 →

All Critical High Medium Low Exploited only Public exploit

104 results · Clear filters · Feed

Medium 4.4

CVE-2021-2022

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu

Jan 20, 2021
Medium 4.7

CVE-2021-2023

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). Supported versions tha…

Oracle Installed Base

Jan 20, 2021
Medium 6.5

CVE-2021-2020

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 20, 2021
Medium 4.2

CVE-2021-2010

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 20, 2021
Medium 4.9

CVE-2021-2009

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 20, 2021
Medium 4.9

CVE-2021-2012

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 20, 2021
Medium 4.3

CVE-2021-2017

Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Supp…

Oracle User Management

Jan 20, 2021
Medium 4.9

CVE-2021-2016

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 20, 2021
Medium 4.9

CVE-2021-2014

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin). Supported versions that…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 20, 2021
Medium 5.9

CVE-2021-2011

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 20, 2021
Medium 5.0

CVE-2021-1999

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: RAS subsystems). The suppor…

Oracle Sun ZFS Storage Appliance Kit (AK) Software

Jan 20, 2021
Medium 4.9

CVE-2021-2002

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 20, 2021
Medium 4.3

CVE-2021-2004

Vulnerability in the Siebel Core - Server BizLogic Script product of Oracle Siebel CRM (component: Integration - Script…

Oracle Siebel Core - Server Framework

Jan 20, 2021
Medium 4.9

CVE-2021-2001

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 20, 2021
Medium 5.4

CVE-2021-2003

Vulnerability in the Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics…

Oracle Business Intelligence Enterprise Edition

Jan 20, 2021
Medium 5.3

CVE-2021-2006

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 20, 2021
Medium 4.7

CVE-2021-2005

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI…

Oracle Business Intelligence Enterprise Edition

Jan 20, 2021
Medium 6.5

CVE-2021-1995

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported ve…

Oracle WebLogic Server

Jan 20, 2021
Medium 4.8

CVE-2021-1993

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12…

Oracle Database - Enterprise Edition

Jan 20, 2021
Medium 6.3

CVE-2021-23326

Command Injection

This affects the package @graphql-tools/git-loader before 6.2.6. The use of exec and execSync in packages/loaders/git/src/load-git.ts allows arbitrary command injection.

@graphql-tools/git-loader npm

Jan 20, 2021
Medium —

CVE-2021-3137

Cross Site Scripting (XSS) in XWiki

XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section.

org.xwiki.commons:xwiki-commons Maven

Jan 20, 2021
Medium 5.4

CVE-2020-27851

Gravity Forms stored HTML injection vulnerability

Multiple stored HTML injection vulnerabilities in the "poll" and "quiz" features in an additional paid add-on of Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary HTML code via poll or quiz answers. This code is interpreted …

wp-premium/gravityforms Packagist

Jan 20, 2021
Medium 5.4

CVE-2020-27852

Gravity Forms stored Cross-Site Scripting (XSS) vulnerability in the survey feature

A stored Cross-Site Scripting (XSS) vulnerability in the survey feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary web script or HTML via a textarea field. This code is interpreted by users in a privileged role (Ad…

wp-premium/gravityforms Packagist

Jan 20, 2021
Medium 4.8

CVE-2020-27850

Gravity Forms stored Cross-Site Scripting (XSS) vulnerability

A stored Cross-Site Scripting (XSS) vulnerability in forms import feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary web script or HTML via the import of a GF form. This code is interpreted by users in a privileged…

wp-premium/gravityforms Packagist

Jan 20, 2021