Skip to content
OpenAdvisories

Archive

22 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /22 May 2021 →
  1. 165
  2. 2178
  3. 31
  4. 4 
  5. 565
  6. 694
  7. 758
  8. 865
  9. 955
  10. 102
  11. 119
  12. 1261
  13. 13207
  14. 1480
  15. 1549
  16. 1619
  17. 174
  18. 188
  19. 1952
  20. 2030
  21. 2140
  22. 22297
  23. 2347
  24. 244
  25. 256
  26. 2668
  27. 2750
  28. 2859
  29. 29118
  30. 3050
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • Critical 9.4
    CVE-2021-31597

    Improper Certificate Validation in xmlhttprequest-ssl

    The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other wor…

    js-jquery xmlhttprequest-ssl node-xmlhttprequest-ssl Ubuntu Azure Linux npm
  • Critical 9.1
    CVE-2021-2320

    Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Manageme…

    Oracle Cloud Infrastructure
  • Critical 9.1
    CVE-2021-2319

    Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Manageme…

    Oracle Cloud Infrastructure
  • Critical 9.1
    CVE-2021-2318

    Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Manageme…

    Oracle Cloud Infrastructure
  • Critical 10.0
    CVE-2021-2317

    Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Manageme…

    Oracle Cloud Infrastructure
  • Critical 9.8
    CVE-2021-2302 Public exploit

    Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: OPSS). Supported…

    Oracle Platform Security for Java
  • Critical 10.0
    CVE-2021-2256

    Vulnerability in the Oracle Storage Cloud Software Appliance product of Oracle Storage Gateway (component: Management C…

    Oracle Cloud Infrastructure
  • Critical 9.1
    CVE-2021-2253

    Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle Supply Chain (component: Core). Supported …

    Oracle Advanced Supply Chain Planning
  • Critical 10.0
    CVE-2021-2248

    Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported v…

    Oracle Secure Global Desktop
  • Critical 10.0
    CVE-2021-2244

    Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion (component: JAPI) and Essbase Analy…

    Oracle Hyperion Analytic Provider Services
  • Critical 9.6
    CVE-2021-2221

    Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). The supported v…

    Oracle Secure Global Desktop
  • Critical 9.1
    CVE-2021-2205

    Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Support…

    Oracle Marketing
  • Critical 9.1
    CVE-2021-2200

    Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Home page). The suppo…

    Oracle Applications Framework
  • Critical 10.0
    CVE-2021-2177

    Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Gateway). The supported …

    Oracle Secure Global Desktop
  • Critical 9.8
    CVE-2021-2135 Scanner template

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container). Suppo…

    Oracle WebLogic Server
  • Critical 9.8
    CVE-2021-2136

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • Critical 9.8
    CVE-2021-0254

    Junos OS: Remote code execution vulnerability in overlayd service

    A buffer size validation vulnerability in the overlayd service of Juniper Networks Junos OS may allow an unauthenticated remote attacker to send specially crafted packets to the device, triggering a partial Denial of Service (DoS) condition, or leading to rem…

    Juniper Networks Junos OS Network devices
  • Critical 10.0
    CVE-2021-0248

    NFX Series: Hard-coded credentials allow an attacker to take control of any instance through administrative interfaces.

    This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper Networks Junos OS allows an attacker to take over any instance of an NFX deployment. This issue is only exploitable through administrative…

    Juniper Networks Junos OS Network devices