2021 CVEs (page 102)
Page 102 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-35588 | Low | 3.1 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java S… |
CVE-2021-35586 | Medium | 5.3 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java S… |
CVE-2021-35585 | High | 8.1 | 2021-10-20 | Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12… |
CVE-2021-35584 | Medium | 4.3 | 2021-10-20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: ndbcluster/plugin DDL). Supported versions that are affected are 8.0.26 and pri… |
CVE-2021-35583 | High | 7.5 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Windows). Supported versions that are affected are 8.0.25 and prior. Easily explo… |
CVE-2021-35582 | Medium | 6.5 | 2021-10-20 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Supported versions that are affected are 12.1.3… |
CVE-2021-35581 | Medium | 4.7 | 2021-10-20 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Supported versions that are affected are 12.1.3… |
CVE-2021-35580 | Medium | 6.1 | 2021-10-20 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Supported versions that are affected are 12.1.3… |
CVE-2021-35578 | Medium | 5.3 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE… |
CVE-2021-35577 | Medium | 4.9 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp… |
CVE-2021-35576 | Low | 2.7 | 2021-10-20 | Vulnerability in the Oracle Database Enterprise Edition Unified Audit component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 1… |
CVE-2021-35575 | Medium | 4.9 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp… |
CVE-2021-35574 | High | 7.5 | 2021-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i… |
CVE-2021-35573 | High | 7.5 | 2021-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i… |
CVE-2021-35572 | High | 7.5 | 2021-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i… |
CVE-2021-35571 | Medium | 5.4 | 2021-10-20 | Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft (component: Advising Notes). The supported version that is affec… |
CVE-2021-35570 | High | 8.1 | 2021-10-20 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.1.1-12.1… |
CVE-2021-35569 | Medium | 4.9 | 2021-10-20 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.1.3 a… |
CVE-2021-35568 | Medium | 6.1 | 2021-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor). Supported versions that are affected are 8.5… |
CVE-2021-35567 | Medium | 6.8 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java… |
CVE-2021-35566 | High | 8.1 | 2021-10-20 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.1.3 a… |
CVE-2021-35565 | Medium | 5.3 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE… |
CVE-2021-35564 | Medium | 5.3 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). Supported versions that are affected are Java S… |
CVE-2021-35563 | High | 8.1 | 2021-10-20 | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.6… |
CVE-2021-35562 | High | 8.1 | 2021-10-20 | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions th… |
CVE-2021-35561 | Medium | 5.3 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions that are affected are Java S… |
CVE-2021-35560 | High | 7.5 | 2021-10-20 | Vulnerability in the Java SE product of Oracle Java SE (component: Deployment). The supported version that is affected is Java SE: 8u301. Difficult to exploit… |
CVE-2021-35559 | Medium | 5.3 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE… |
CVE-2021-35558 | Medium | 4.3 | 2021-10-20 | Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 19c and 21c. Easily exploitab… |
CVE-2021-35557 | Medium | 4.3 | 2021-10-20 | Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 19c and 21c. Easily exploitab… |
CVE-2021-35556 | Medium | 5.3 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE… |
CVE-2021-35554 | Medium | 5.3 | 2021-10-20 | Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3 and… |
CVE-2021-35553 | Medium | 5.4 | 2021-10-20 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Class Search). The supported version that is affected is… |
CVE-2021-35552 | Medium | 5.3 | 2021-10-20 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Diagnostics). Supported versions that are affected are 12.2.1.3.0… |
CVE-2021-35551 | Medium | 5.5 | 2021-10-20 | Vulnerability in the RDBMS Security component of Oracle Database Server. Supported versions that are affected are 12.2.0.1, 19c and 21c. Easily exploitable vul… |
CVE-2021-35550 | Medium | 5.9 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE… |
CVE-2021-35549 | Low | 3.9 | 2021-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11. Easily exploitable vulnerabil… |
CVE-2021-35546 | Medium | 4.9 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.26 and prior. Easily e… |
CVE-2021-35545 | Medium | 6.7 | 2021-10-20 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.28. Easily… |
CVE-2021-35543 | High | 8.1 | 2021-10-20 | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Activity Guide Composer). The supported versi… |
CVE-2021-35542 | Medium | 4.4 | 2021-10-20 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.28. Easily… |
CVE-2021-35541 | Medium | 5.4 | 2021-10-20 | Vulnerability in the PeopleSoft Enterprise SCM product of Oracle PeopleSoft (component: Supplier Portal). The supported version that is affected is 9.2. Easily… |
CVE-2021-35540 | Medium | 5.5 | 2021-10-20 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.28. Easily… |
CVE-2021-35539 | Medium | 6.5 | 2021-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnera… |
CVE-2021-35538 | High | 7.8 | 2021-10-20 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.28. Easily… |
CVE-2021-35537 | Medium | 4.9 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.25 and prior. Easily exploitab… |
CVE-2021-35536 | High | 8.1 | 2021-10-20 | Vulnerability in the Oracle Deal Management product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.1.1-12.1… |
CVE-2021-2485 | High | 8.1 | 2021-10-20 | Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3. Ea… |
CVE-2021-2484 | High | 8.1 | 2021-10-20 | Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite (component: BIS Operations Intelligence). Supported versions that are af… |
CVE-2021-2483 | High | 8.1 | 2021-10-20 | Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Content Item Manager). Supported versions that are affected are 12.1… |
CVE-2021-2482 | High | 8.1 | 2021-10-20 | Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Invoice Approvals). Supported versions that are affected are 12.1.1-12.1.3… |
CVE-2021-2481 | Medium | 6.5 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp… |
CVE-2021-2480 | Low | 3.7 | 2021-10-20 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 11.1.1.9.0. Di… |
CVE-2021-2479 | Medium | 4.9 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitab… |
CVE-2021-2478 | Medium | 4.9 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitab… |
CVE-2021-2477 | Medium | 5.3 | 2021-10-20 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management). Supported versions that are affected are… |
CVE-2021-2476 | Medium | 5.3 | 2021-10-20 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Authentication). The supported version that is affected is 6.4… |
CVE-2021-2475 | Medium | 4.4 | 2021-10-20 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.28. Easily… |
CVE-2021-2474 | High | 8.1 | 2021-10-20 | Vulnerability in the Oracle Web Analytics product of Oracle E-Business Suite (component: Admin). Supported versions that are affected are 12.1.1-12.1.3. Easily… |
CVE-2021-2471 | Medium | 5.9 | 2021-10-20 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to… |
CVE-2021-2461 | High | 8.3 | 2021-10-20 | Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications (component: Provision API). The supported version that… |
CVE-2021-2416 | Medium | 4.9 | 2021-10-20 | Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications (component: Routing). Supported versions that are affecte… |
CVE-2021-2414 | Medium | 6.8 | 2021-10-20 | Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications (component: Routing). Supported versions that are affecte… |
CVE-2021-2332 | Medium | 6.7 | 2021-10-20 | Vulnerability in the Oracle LogMiner component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitab… |
CVE-2021-2137 | High | 8.8 | 2021-10-20 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework). Supported versions that are affected… |
CVE-2021-42739 | Medium | 6.7 | 2021-10-20 | The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/fir… |
CVE-2021-30316 | High | 8.4 | 2021-10-20 | Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2021-30315 | High | 8.4 | 2021-10-20 | Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon Auto |
CVE-2021-30312 | High | 7.5 | 2021-10-20 | Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… |
CVE-2021-30310 | High | 7.5 | 2021-10-20 | Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2021-30306 | High | 8.4 | 2021-10-20 | Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Indu… |
CVE-2021-30305 | High | 8.4 | 2021-10-20 | Possible out of bound access due to lack of validation of page offset before page is inserted in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industria… |
CVE-2021-30304 | High | 7.5 | 2021-10-20 | Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdr… |
CVE-2021-30302 | High | 7.5 | 2021-10-20 | Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, S… |
CVE-2021-30297 | High | 8.4 | 2021-10-20 | Possible out of bound read due to improper validation of packet length while handling data transfer in VR service in Snapdragon Auto, Snapdragon Compute, Snapd… |
CVE-2021-30292 | High | 8.4 | 2021-10-20 | Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-30291 | High | 8.4 | 2021-10-20 | Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-30288 | High | 8.4 | 2021-10-20 | Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2021-30258 | High | 8.4 | 2021-10-20 | Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn… |
CVE-2021-30257 | High | 8.4 | 2021-10-20 | Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon… |
CVE-2021-30256 | High | 8.4 | 2021-10-20 | Possible stack overflow due to improper validation of camera name length before copying the name in VR Service in Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-1985 | High | 8.4 | 2021-10-20 | Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr… |
CVE-2021-1984 | High | 8.4 | 2021-10-20 | Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect… |
CVE-2021-1983 | High | 8.4 | 2021-10-20 | Possible buffer overflow due to improper handling of negative data length while processing write request in VR service in Snapdragon Auto, Snapdragon Compute… |
CVE-2021-1980 | High | 7.5 | 2021-10-20 | Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… |
CVE-2021-1977 | High | 7.5 | 2021-10-20 | Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Auto, Snapdragon Comp… |
CVE-2021-1969 | Medium | 6.2 | 2021-10-20 | Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snap… |
CVE-2021-1968 | Medium | 6.2 | 2021-10-20 | Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snap… |
CVE-2021-1967 | Medium | 5.3 | 2021-10-20 | Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN Match event in Snapdragon Aut… |
CVE-2021-1966 | Medium | 6.7 | 2021-10-20 | Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Consume… |
CVE-2021-1959 | High | 7.8 | 2021-10-20 | Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT… |
CVE-2021-1949 | High | 8.4 | 2021-10-20 | Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-1936 | High | 7.5 | 2021-10-20 | Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… |
CVE-2021-1932 | High | 8.4 | 2021-10-20 | Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Sn… |
CVE-2021-1917 | High | 8.4 | 2021-10-20 | Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industr… |
CVE-2021-1913 | High | 8.4 | 2021-10-20 | Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… |
CVE-2021-3455 | Medium | 4.3 | 2021-10-19 | Disconnecting L2CAP channel right after invalid ATT request leads freeze. Zephyr versions >= 2.4.0, >= 2.5.0 contain Use After Free (CWE-416). For more informa… |
CVE-2021-3454 | Medium | 4.3 | 2021-10-19 | Truncated L2CAP K-frame causes assertion failure. Zephyr versions >= 2.4.0, >= v.2.50 contain Improper Handling of Length Parameter Inconsistency (CWE-130), Re… |
CVE-2021-41150 | High | 8.2 | 2021-10-19 | Tough provides a set of Rust libraries and tools for using and generating the update framework (TUF) repositories. The tough library, prior to 0.12.0, does not… |
CVE-2021-31386 | Medium | 5.3 | 2021-10-19 | A Protection Mechanism Failure vulnerability in the J-Web HTTP service of Juniper Networks Junos OS allows a remote unauthenticated attacker to perform Person-… |