2021-04-22 - CVE Archive

CVE-2021-24242 LOW POC Monitor

The Tutor LMS - eLearning and online course solution WordPress plugin before 1.8.8 is affected by a local file inclusion vulnerability through the maliciously constructed sub_page parameter of the. Rated low severity (CVSS 3.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress Path Traversal PHP Tutor Lms

NVD WPScan

CVSS 3.1

3.8

EPSS

0.8%

CVE-2021-2175 LOW POC PATCH Monitor

Vulnerability in the Database Vault component of Oracle Database Server. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Oracle Hashicorp Authentication Bypass Database Server

NVD

CVSS 3.1

2.7

EPSS

1.7%

CVE-2021-2158 LOW PATCH Monitor

Vulnerability in the Hyperion Financial Management product of Oracle Hyperion (component: Task Automation). Rated low severity (CVSS 3.9), this vulnerability is remotely exploitable.

Denial Of Service Oracle Hyperion Financial Management

NVD

CVSS 3.1

3.9

EPSS

0.6%

CVE-2021-2159 LOW PATCH Monitor

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Frameworks). Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity.

Oracle Authentication Bypass Peoplesoft Enterprise Campus Software Campus Community

NVD

CVSS 3.1

3.5

EPSS

0.7%

CVE-2021-2308 LOW Monitor

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Authentication Bypass MySQL Active Iq Unified Manager Oncommand Insight +2

NVD

CVSS 3.1

2.7

EPSS

1.0%

CVE-2021-2301 LOW Monitor

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Authentication Bypass MySQL Active Iq Unified Manager Oncommand Insight +2

NVD

CVSS 3.1

2.7

EPSS

1.0%

CVE-2021-2245 LOW PATCH Monitor

Vulnerability in the Oracle Database - Enterprise Edition Unified Audit component of Oracle Database Server. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity.

Oracle Authentication Bypass Database

NVD

CVSS 3.1

2.7

EPSS

0.7%

CVE-2021-2149 LOW PATCH Monitor

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). Rated low severity (CVSS 2.5).

Oracle Authentication Bypass Zfs Storage Appliance

NVD

CVSS 3.1

2.5

EPSS

0.3%

CVE-2021-2207 LOW PATCH Monitor

Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Rated low severity (CVSS 2.3), this vulnerability is low attack complexity.

Oracle Authentication Bypass Database

NVD

CVSS 3.1

2.3

EPSS

0.6%

CVE-2021-2141 LOW PATCH Monitor

Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Login). Rated low severity (CVSS 2.0), this vulnerability is remotely exploitable.

Oracle Authentication Bypass Flexcube Direct Banking

NVD

CVSS 3.1

2.0

EPSS

0.6%

CVE-2021-2232 LOW Monitor

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Rated low severity (CVSS 1.9). No vendor patch available.

Denial Of Service Oracle MySQL Active Iq Unified Manager Oncommand Insight +2

NVD

CVSS 3.1

1.9

EPSS

0.4%

CVE-2021-2147 LOW PATCH Monitor

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Installation). Rated low severity (CVSS 1.8).

Oracle Authentication Bypass Zfs Storage Appliance

NVD

CVSS 3.1

1.8

EPSS

0.3%