Archive
July 2021
Vulnerabilities first published in this month (UTC), newest first.
1,584 results · Feed
-
Medium 5.2
Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). T…
-
Medium 5.4
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…
-
Medium 5.4
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…
-
High 7.5
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…
-
Medium 4.3
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supp…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Low 3.1
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supp…
-
Low 2.7
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached). Supported versions that are a…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…
-
Medium 6.1
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing Stand-Alone). Sup…
-
High 7.2
Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0…
-
Low 3.5
Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. Supported…
-
Low 3.5
Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. Supported…
-
Medium 4.9
Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0…
-
Low 3.5
Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. Supported…
-
Medium 4.3
Vulnerability in the Core RDBMS component of Oracle Database Server. The supported version that is affected is 19c. Eas…
-
High 7.2
Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0…
-
High 7.2
Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 12.1.0.2…
-
Low 2.7
Vulnerability in the Database Vault component of Oracle Database Server. Supported versions that are affected are 12.2.…
-
Medium 4.6
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Lo…
-
Medium 5.9
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Fl…
-
Unscored —
HashiCorp Terraform Enterprise releases up to v202106-1 did not properly perform authorization checks on a subset of AP…
-
Unscored —
Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor.
-
Unscored —CVE-2021-36747 Public exploit
Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form.
-
Unscored —
Information disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to copy and paste aspx pages in t…
-
Unscored —
The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Thro…
-
Unscored —
The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 is vulnerable to stored XSS in the set_banner() fu…
-
Medium 5.5
basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Va…
-
Unscored —CVE-2021-33909 Public exploit
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, …
-
Medium 4.0
IBM Cloud Pak System 2.3 could allow a local user in some situations to view the artifacts of another user in self serv…
-
Medium 4.3
Regular Expression Denial of Service in OpenProject forum messages
OpenProject is open-source, web-based project management software. In versions prior to 11.3.3, the `MessagesController` class of OpenProject has a `quote` method that implements the logic behind the Quote button in the discussion forums, and it uses a regex …
-
Medium 5.3
Information Disclosure in User Authentication
TYPO3 is an open source PHP based web content management system. In versions 9.0.0 through 9.5.27, 10.0.0 through 10.4.17, and 11.0.0 through 11.3.0, user credentials may been logged as plain-text. This occurs when explicitly using log level debug, which is n…
-
Medium 6.4
Cross-Site Scripting in Backend Grid View
TYPO3 is an open source PHP based web content management system. Versions 9.0.0 through 9.5.28, 10.0.0 through 10.4.17, and 11.0.0 through 11.3.0 have a cross-site scripting vulnerability. When settings for _backend layouts_ are not properly encoded, the corr…
-
Medium 6.4
Cross-Site Scripting in Query Generator & Query View
TYPO3 is an open source PHP based web content management system. Versions 9.0.0 through 9.5.28, 10.0.0 through 10.4.17, and 11.0.0 through 11.3.0 have a cross-site scripting vulnerability. When error messages are not properly encoded, the components _QueryGen…
-
Medium 6.4
Cross-Site Scripting in Page Preview
TYPO3 is an open source PHP based web content management system. Versions 9.0.0 through 9.5.28, 10.0.0 through 10.4.17, and 11.0.0 through 11.3.0 have a cross-site scripting vulnerability. When _Page TSconfig_ settings are not properly encoded, corresponding …
-
Unscored —
SQL injection vulnerability in PHPGurukul Employee Record Management System 1.1 allows remote attackers to execute arbi…
-
Unscored —CVE-2021-27338 Public exploit
Faraday Edge before 3.7 allows XSS via the network/create/ page and its network name parameter.
-
Unscored —
Foxit PDF SDK For Web through 7.5.0 allows XSS. There is arbitrary JavaScript code execution in the browser if a victim…
-
Unscored —
Missing checks on Content-Type headers in geckodriver before 0.27.0 could lead to a CSRF vulnerability, that might, whe…
-
Unscored —
An incorrect permission assignment denial-of-service vulnerability in Trend Micro Apex One, Apex One as a Service (SaaS…