Archive
20 January 2021
Vulnerabilities first published on this day (UTC), newest first.
242 results · Feed
-
High 8.3
Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affect…
-
Medium 4.2
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…
-
Medium 4.3
Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Supp…
-
High 8.2
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that …
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin). Supported versions that…
-
Medium 5.9
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …
-
High 7.6
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). Suppor…
-
Medium 5.0
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: RAS subsystems). The suppor…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are…
-
Medium 4.3
Vulnerability in the Siebel Core - Server BizLogic Script product of Oracle Siebel CRM (component: Integration - Script…
-
Low 3.7
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 5.4
Vulnerability in the Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics…
-
Low 2.4
Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 12.1.0…
-
Medium 5.3
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …
-
Medium 4.7
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI…
-
Medium 6.5
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported ve…
-
Low 3.8
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Critical 9.8CVE-2021-1994 Public exploit
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported ve…
-
Low 2.4
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported ve…
-
Medium 4.8
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12…
-
High 8.1
Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (compo…
-
Critical 9.8
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components). Supported versi…
-
Medium 6.3
Command Injection
This affects the package @graphql-tools/git-loader before 6.2.6. The use of exec and execSync in packages/loaders/git/src/load-git.ts allows arbitrary command injection.
-
High 8.8
Cross-Site Request Forgery in Vert.x-Web framework
Vert.x-Web framework v4.0 milestone 1-4 does not perform a correct CSRF verification. Instead of comparing the CSRF token in the request with the CSRF token in the cookie, it compares the CSRF token in the cookie against a CSRF token that is stored in the ses…
-
Unscored —
The store system in PrestaShop 1.7.7.0 allows time-based boolean SQL injection via the module=productcomments controlle…
-
Medium —
Cross Site Scripting (XSS) in XWiki
XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section.
-
Medium 5.4
Gravity Forms stored HTML injection vulnerability
Multiple stored HTML injection vulnerabilities in the "poll" and "quiz" features in an additional paid add-on of Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary HTML code via poll or quiz answers. This code is interpreted …
-
Medium 5.4
Gravity Forms stored Cross-Site Scripting (XSS) vulnerability in the survey feature
A stored Cross-Site Scripting (XSS) vulnerability in the survey feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary web script or HTML via a textarea field. This code is interpreted by users in a privileged role (Ad…
-
Medium 4.8
Gravity Forms stored Cross-Site Scripting (XSS) vulnerability
A stored Cross-Site Scripting (XSS) vulnerability in forms import feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary web script or HTML via the import of a GF form. This code is interpreted by users in a privileged…
-
Unscored —
Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful exploitation requires …
-
Unscored —
Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful exploitation requires …
-
Unscored —CVE-2020-25385 EPSS 16%
Nagios Log Server 2.1.7 contains a cross-site scripting (XSS) vulnerability in /nagioslogserver/configure/create_snapsh…
-
Unscored —CVE-2020-19364 EPSS 71%
OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious PHP scripts through /controller.php.
-
Unscored —CVE-2020-19363 Scanner template
Vtiger CRM v7.2.0 allows an attacker to display hidden files, list directories by using /libraries and /layout director…
-
Unscored —
Reflected XSS in Vtiger CRM v7.2.0 in vtigercrm/index.php? through the view parameter can result in an attacker perform…
-
Unscored —
Reflected XSS in Medintux v2.16.000 CCAM.php by manipulating the mot1 parameter can result in an attacker performing ma…