Latest CVE Feed
-
7.5
HIGHCVE-2021-2008
Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin). The supported version that is affected are 11.1.1.9 and 12.2.1.3 Easily exploitable vulnerability allows unauthenticated at... Read more
Affected Products : enterprise_manager- EPSS Score: %0.75
- Published: Apr. 22, 2021
- Modified: Nov. 21, 2024
-
4.3
MEDIUMCVE-2021-2007
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network... Read more
Affected Products : fedora active_iq_unified_manager mysql mariadb oncommand_insight oncommand_workflow_automation mysql_server- EPSS Score: %0.50
- Published: Jan. 20, 2021
- Modified: Nov. 21, 2024
-
6.3
MEDIUMCVE-2021-2006
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 8.0.19 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compro... Read more
Affected Products : fedora active_iq_unified_manager mysql oncommand_insight oncommand_workflow_automation mysql_server- EPSS Score: %1.13
- Published: Jan. 20, 2021
- Modified: Nov. 21, 2024
-
4.7
MEDIUMCVE-2021-2005
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthe... Read more
Affected Products : business_intelligence- EPSS Score: %0.86
- Published: Jan. 20, 2021
- Modified: Nov. 21, 2024
-
4.3
MEDIUMCVE-2021-2004
Vulnerability in the Siebel Core - Server BizLogic Script product of Oracle Siebel CRM (component: Integration - Scripting). Supported versions that are affected are 20.12 and prior. Easily exploitable vulnerability allows low privileged attacker with net... Read more
- EPSS Score: %0.20
- Published: Jan. 20, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-2003
Vulnerability in the Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web Dashboards). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerab... Read more
Affected Products : business_intelligence- EPSS Score: %0.18
- Published: Jan. 20, 2021
- Modified: Nov. 21, 2024
-
6.8
MEDIUMCVE-2021-2002
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc... Read more
Affected Products : fedora mysql oncommand_insight oncommand_workflow_automation snapcenter mysql_server- EPSS Score: %0.15
- Published: Jan. 20, 2021
- Modified: Nov. 21, 2024
-
6.8
MEDIUMCVE-2021-2001
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.50 and prior, 5.7.30 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker wi... Read more
Affected Products : fedora mysql oncommand_insight oncommand_workflow_automation snapcenter mysql_server- EPSS Score: %0.36
- Published: Jan. 20, 2021
- Modified: Nov. 21, 2024
-
3.5
LOWCVE-2021-2000
Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having SYS Account privilege with network ac... Read more
Affected Products : database_server- EPSS Score: %0.22
- Published: Jan. 20, 2021
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2021-29999
An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server.... Read more
Affected Products : vxworks- EPSS Score: %0.39
- Published: Apr. 13, 2021
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2021-29998
An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client.... Read more
Affected Products : scalance_x408_firmware scalance_x300_firmware vxworks scalance_x201-3p_irt_firmware scalance_x201-3p_irt_pro_firmware scalance_x202-2p_irt_firmware scalance_x202-2p_irt_pro_firmware scalance_xf201-3p_irt_firmware scalance_xf202-2p_irt_firmware scalance_xf204-2ba_irt_firmware +61 more products- EPSS Score: %1.19
- Published: Apr. 13, 2021
- Modified: Nov. 21, 2024
-
5.3
MEDIUMCVE-2021-29997
An issue was discovered in Wind River VxWorks 7 before 21.03. A specially crafted packet may lead to buffer over-read on IKE.... Read more
Affected Products : vxworks- EPSS Score: %0.13
- Published: Apr. 13, 2021
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2021-29996
Mark Text through 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution (RCE) by opening .md files containing a mutation Cross Site Scripting (XSS) payload.... Read more
Affected Products : marktext- EPSS Score: %2.37
- Published: Apr. 05, 2021
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-29995
A Cross Site Request Forgery (CSRF) issue in Server Console in CloverDX through 5.9.0 allows remote attackers to execute any action as the logged-in user (including script execution). The issue is resolved in CloverDX 5.10, CloverDX 5.9.1, CloverDX 5.8.2,... Read more
Affected Products : cloverdx- EPSS Score: %2.27
- Published: Jun. 09, 2021
- Modified: Nov. 21, 2024
-
6.1
MEDIUM- EPSS Score: %0.66
- Published: Nov. 08, 2021
- Modified: Nov. 21, 2024
-
8.1
HIGHCVE-2021-29993
Firefox for Android allowed navigations through the `intent://` protocol, which could be used to cause crashes and UI spoofs. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 92.... Read more
Affected Products : firefox- EPSS Score: %0.40
- Published: Nov. 03, 2021
- Modified: Nov. 21, 2024
-
8.1
HIGHCVE-2021-29991
Firefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate headers. This allowed for a header splitting attack against servers using HTTP/3. This vulnerability affects Firefox < 91.0.1 and Thunderbird < 91.0.1.... Read more
- EPSS Score: %0.34
- Published: Nov. 03, 2021
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-29990
Mozilla developers and community members reported memory safety bugs present in Firefox 90. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This ... Read more
Affected Products : firefox- EPSS Score: %0.44
- Published: Aug. 17, 2021
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-29989
Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This ... Read more
- EPSS Score: %0.35
- Published: Aug. 17, 2021
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-29988
Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13... Read more
- EPSS Score: %0.30
- Published: Aug. 17, 2021
- Modified: Nov. 21, 2024