Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle graalvm 21.0.0.2 vulnerabilities and exploits

(subscribe to this query)
5.9
CVSSv3
CVE-2021-2161
Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20....
Oracle Jdk 11.0.10Oracle Jdk 16.0.0Oracle Jdk 1.8.0Oracle Jdk 1.7.0Oracle Jre 1.8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Oracle Graalvm 20.3.1.2Oracle Graalvm 21.0.0.2Oracle Graalvm 19.3.5Oracle Openjdk 8Oracle Openjdk 7Oracle Openjdk 16Oracle OpenjdkNetapp Solidfire -Netapp Hci Management Node -Netapp Hci Storage Node -Netapp Active Iq Unified Manager -Netapp Hci Compute Node -
5.3
CVSSv3
CVE-2021-2163
Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20....
Oracle Jdk 11.0.10Oracle Jdk 16.0.0Oracle Jdk 1.8.0Oracle Jdk 1.7.0Oracle Jre 1.8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Oracle Graalvm 20.3.1.2Oracle Graalvm 21.0.0.2Oracle Graalvm 19.3.5Oracle Openjdk 8Oracle Openjdk 7Oracle Openjdk 16Oracle OpenjdkNetapp Solidfire -Netapp Hci Management Node -Netapp Hci Storage Node -Netapp Active Iq Unified Manager -Netapp Hci Compute Node -
5.9
CVSSv3
CVE-2021-3449
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_ce...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Freebsd Freebsd 12.2Netapp Santricity Smi-s Provider -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp Oncommand Insight -Netapp Ontap Select Deploy Administration Utility -Netapp Active Iq Unified Manager -Netapp Cloud Volumes Ontap Mediator -Netapp E-series Performance Analyzer -Tenable Tenable.scTenable NessusTenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Tenable Nessus Network Monitor 5.11.0Tenable Log Correlation EngineFedoraproject Fedora 34
7.4
CVSSv3
CVE-2021-3450
The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve paramet...
Openssl OpensslFreebsd Freebsd 12.2Netapp Santricity Smi-s Provider Firmware -Netapp Storagegrid Firmware -Windriver Linux -Windriver Linux 18.0Windriver Linux 19.0Windriver Linux 17.0Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp Ontap Select Deploy Administration Utility -Netapp Cloud Volumes Ontap Mediator -Fedoraproject Fedora 34Tenable Nessus AgentTenable NessusTenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Tenable Nessus Network Monitor 5.11.0Oracle Jd Edwards World Security A9.4Oracle Weblogic Server 12.2.1.4.0
7.5
CVSSv3
CVE-2021-22883
Node.js prior to 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the sys...
Nodejs Node.jsFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Netapp E-series Performance Analyzer -Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Graalvm 20.3.1.2Oracle Graalvm 21.0.0.2Oracle Graalvm 19.3.5Oracle Nosql DatabaseOracle Mysql ClusterOracle Peoplesoft Enterprise Peopletools 8.59Oracle Jd Edwards Enterpriseone ToolsSiemens Sinec Infrastructure Network Services
7.5
CVSSv3
CVE-2021-22884
Node.js prior to 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6”. When “localhost6” is not present in /etc/hosts, it is just an ordinary domain that is resolved via DNS, i.e., over networ...
Nodejs Node.jsFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -Netapp E-series Performance Analyzer -Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Graalvm 20.3.1.2Oracle Graalvm 21.0.0.2Oracle Graalvm 19.3.5Oracle Nosql DatabaseOracle Mysql ClusterOracle Peoplesoft Enterprise Peopletools 8.59Oracle Jd Edwards Enterpriseone ToolsSiemens Sinec Infrastructure Network Services
3.7
CVSSv3
CVE-2021-23839
OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS ve...
Openssl OpensslOracle Business Intelligence 12.2.1.3.0Oracle Jd Edwards World Security A9.4Oracle Business Intelligence 12.2.1.4.0Oracle Business Intelligence 5.5.0.0.0Oracle Enterprise Manager For Storage Management 13.4.0.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Zfs Storage Appliance Kit 8.8Oracle Graalvm 19.3.5Oracle Graalvm 20.3.1.2Oracle Graalvm 21.0.0.2Oracle Business Intelligence 5.9.0.0.0Siemens Sinec Ins 1.0Siemens Sinec Ins
7.5
CVSSv3
CVE-2021-23840
Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be...
Openssl OpensslDebian Debian Linux 10.0Tenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Tenable Nessus Network Monitor 5.11.0Tenable Log Correlation EngineOracle Business Intelligence 12.2.1.3.0Oracle Jd Edwards World Security A9.4Oracle Business Intelligence 12.2.1.4.0Oracle Business Intelligence 5.5.0.0.0Oracle Enterprise Manager For Storage Management 13.4.0.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Graalvm 20.3.1.2Oracle Graalvm 21.0.0.2Oracle Graalvm 19.3.5Oracle Mysql ServerOracle Nosql DatabaseOracle Jd Edwards Enterpriseone ToolsOracle Business Intelligence 5.9.0.0.0Oracle Communications Cloud Native Core Policy 1.15.0
5.9
CVSSv3
CVE-2021-23841
The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (whi...
Openssl OpensslDebian Debian Linux 10.0Tenable Tenable.scTenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Tenable Nessus Network Monitor 5.11.0Apple MacosApple Iphone OsApple SafariApple IpadosNetapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Oracle Business Intelligence 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Jd Edwards World Security A9.4Oracle Business Intelligence 12.2.1.4.0Oracle Business Intelligence 5.5.0.0.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Manager For Storage Management 13.4.0.0
9.8
CVSSv3
CVE-2020-7774
The package y18n prior to 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.
Y18n Project Y18nY18n Project Y18n 4.0.0Oracle Graalvm 20.3.1.2Oracle Graalvm 21.0.0.2Oracle Graalvm 19.3.5Siemens Sinec Infrastructure Network Services
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook