22 April 2021

297 results · Feed

• Critical 9.4
  CVE-2021-31597

  Improper Certificate Validation in xmlhttprequest-ssl

  The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other wor…

  js-jquery xmlhttprequest-ssl node-xmlhttprequest-ssl Ubuntu Azure Linux npm
  Apr 22, 2021
• Low 3.5
  CVE-2021-22199

  An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored XSS…

  GitLab GitLab gitlab Web / CMS Ubuntu
  Apr 22, 2021
• Critical 9.1
  CVE-2021-2320

  Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Manageme…

  Oracle Cloud Infrastructure
  Apr 22, 2021
• Critical 9.1
  CVE-2021-2319

  Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Manageme…

  Oracle Cloud Infrastructure
  Apr 22, 2021
• Critical 9.1
  CVE-2021-2318

  Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Manageme…

  Oracle Cloud Infrastructure
  Apr 22, 2021
• Critical 10.0
  CVE-2021-2317

  Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Manageme…

  Oracle Cloud Infrastructure
  Apr 22, 2021
• Medium 5.4
  CVE-2021-2315

  Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). Supported versio…

  Oracle HTTP Server
  Apr 22, 2021
• Medium 6.5
  CVE-2021-2311

  Vulnerability in the Oracle Hospitality Inventory Management product of Oracle Food and Beverage Applications (componen…

  Oracle Hospitality Inventory Management
  Apr 22, 2021
• Low 2.7
  CVE-2021-2308

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions t…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 22, 2021
• High 7.5
  CVE-2021-2309

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Apr 22, 2021
• High 7.5
  CVE-2021-2310

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Apr 22, 2021
• Medium 4.4
  CVE-2021-2312

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Apr 22, 2021
• High 8.1
  CVE-2021-2316

  Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR). Supported versions…

  Oracle HRMS (France)
  Apr 22, 2021
• Medium 6.1
  CVE-2021-2307

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 22, 2021
• High 8.1
  CVE-2021-2314

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Profiles). Suppor…

  Oracle Application Object Library
  Apr 22, 2021
• Medium 4.9
  CVE-2021-2305

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 22, 2021
• Medium 6.5
  CVE-2021-2298

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 22, 2021
• Medium 4.9
  CVE-2021-2303

  Vulnerability in the OSS Support Tools product of Oracle Support Tools (component: Diagnostic Assistant). The supported…

  Oracle OSS Support Tools
  Apr 22, 2021
• Low 2.7
  CVE-2021-2301

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions t…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 22, 2021
• Medium 5.5
  CVE-2021-2304

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions tha…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 22, 2021
• Medium 4.9
  CVE-2021-2299

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 22, 2021
• Medium 4.9
  CVE-2021-2300

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 22, 2021
• Critical 9.8
  CVE-2021-2302 Public exploit

  Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: OPSS). Supported…

  Oracle Platform Security for Java
  Apr 22, 2021
• Medium 6.0
  CVE-2021-2306

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Apr 22, 2021
• Medium 4.9
  CVE-2021-2293

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions tha…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 22, 2021
• Medium 5.3
  CVE-2021-2297

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Apr 22, 2021
• High 8.1
  CVE-2021-2290

  Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported ve…

  Oracle Engineering
  Apr 22, 2021
• Medium 6.5
  CVE-2021-2294

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle WebLogic Server
  Apr 22, 2021
• High 8.1
  CVE-2021-2295

  Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integrati…

  Oracle Concurrent Processing
  Apr 22, 2021
• High 8.1
  CVE-2021-2292

  Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Docume…

  Oracle Document Management and Collaboration
  Apr 22, 2021
• Medium 4.7
  CVE-2021-2291

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Apr 22, 2021
• Medium 5.3
  CVE-2021-2296

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Apr 22, 2021
• High 7.1
  CVE-2021-2286

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Apr 22, 2021
• High 7.1
  CVE-2021-2285

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Apr 22, 2021
• High 7.1
  CVE-2021-2284

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Apr 22, 2021
• High 7.1
  CVE-2021-2282

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Apr 22, 2021
• High 7.1
  CVE-2021-2281

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Apr 22, 2021
• High 8.1
  CVE-2021-2289 EPSS 17%

  Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Template, GTIN search). Supporte…

  Oracle Product Hub
  Apr 22, 2021
• High 7.1
  CVE-2021-2283

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Apr 22, 2021
• High 8.1
  CVE-2021-2288

  Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Bill Issues). Supported ve…

  Oracle Bills of Material
  Apr 22, 2021