oracle

10,484 tracked vulnerabilities.

CVE-2021-21783 CRITICAL
Genivia gSOAP 2.8.107 - Remote Code Execution via WS-Addressing Plugin
Mar 25, 2021
CVSS 9.8
EPSS 0.05
CVE-2021-3450 HIGH
OpenSSL 1.1.1h-1.1.1j - Certificate Chain Validation Bypass via X509_V_FLAG_X509_STRICT
Mar 25, 2021
CVSS 7.4
EPSS 0.18
CVE-2021-3449 MEDIUM
Openssl < 1.1.1k - NULL Pointer Dereference
Mar 25, 2021
CVSS 5.9
EPSS 0.63
CVE-2021-20227 MEDIUM
SQLite 3.33.0-3.34.0 - Use-After-Free in SELECT Query Processing
Mar 23, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-21351 MEDIUM NUCLEI
Oracle Banking Platform < 5.15.14 - Insecure Deserialization
Mar 23, 2021
CVSS 5.4
EPSS 0.82
CVE-2021-21350 MEDIUM
Netapp Oncommand Insight < 5.15.14 - Insecure Deserialization
Mar 23, 2021
CVSS 5.3
EPSS 0.15
CVE-2021-21349 MEDIUM
Netapp Oncommand Insight < 5.15.14 - SSRF
Mar 23, 2021
CVSS 6.1
EPSS 0.47
CVE-2021-21348 MEDIUM
Netapp Oncommand Insight < 5.15.14 - Insecure Deserialization
Mar 23, 2021
CVSS 5.3
EPSS 0.14
CVE-2021-21347 MEDIUM
Netapp Oncommand Insight < 5.15.14 - Insecure Deserialization
Mar 23, 2021
CVSS 6.1
EPSS 0.14
CVE-2021-21346 MEDIUM
Netapp Oncommand Insight < 5.15.14 - Insecure Deserialization
Mar 23, 2021
CVSS 6.1
EPSS 0.76
CVE-2021-21345 MEDIUM NUCLEI
Netapp Oncommand Insight < 5.15.14 - Insecure Deserialization
Mar 23, 2021
CVSS 5.8
EPSS 0.72
CVE-2021-21344 MEDIUM
Netapp Oncommand Insight < 5.15.14 - Insecure Deserialization
Mar 23, 2021
CVSS 5.3
EPSS 0.76
CVE-2021-21343 MEDIUM
XStream <1.4.16 - Code Injection
Mar 23, 2021
CVSS 5.3
EPSS 0.47
CVE-2021-21342 MEDIUM
Netapp Oncommand Insight < 5.15.14 - SSRF
Mar 23, 2021
CVSS 5.3
EPSS 0.50
CVE-2021-21341 HIGH
NetApp OnCommand Insight - Denial of Service via XStream Deserialization
Mar 23, 2021
CVSS 7.5
EPSS 0.78
CVE-2021-28957 MEDIUM
lxml < 4.6.3 - Cross-Site Scripting via Formaction Attribute Bypass
Mar 21, 2021
CVSS 6.1
EPSS 0.04
CVE-2021-27906 MEDIUM
Apache PDFBox <2.0.22 - Memory Corruption
Mar 19, 2021
CVSS 5.5
EPSS 0.03
CVE-2021-27807 MEDIUM
Apache PDFBox <2.0.22 - Info Disclosure
Mar 19, 2021
CVSS 5.5
EPSS 0.03
CVE-2021-28363 MEDIUM
urllib3 1.26.0-1.26.3 - Improper Certificate Validation in HTTPS Proxy Connections
Mar 15, 2021
CVSS 6.5
EPSS 0.02
CVE-2021-22191 MEDIUM
Wireshark 3.2.0-3.2.11 and 3.4.0-3.4.3 - Remote Code Execution via Packet Injection or Crafted Capture File
Mar 15, 2021
CVSS 6.3
EPSS 0.04
CVE-2021-27290 HIGH
ssri 5.2.2-8.0.0 - Denial of Service via SRI Processing Regular Expression
Mar 12, 2021
CVSS 7.5
EPSS 0.05
CVE-2021-20265 MEDIUM
Linux Kernel - Use-After-Free in unix_stream_recvmsg
Mar 10, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-21295 MEDIUM
Netty < 4.1.60 - HTTP Request Smuggling via HTTP/2 to HTTP/1.1 Conversion
Mar 09, 2021
CVSS 5.9
EPSS 0.19
CVE-2021-22134 MEDIUM
Elasticsearch 7.6.0-7.10.2 - Unauthorized Document Disclosure via Document or Field Level Security Bypass
Mar 08, 2021
CVSS 4.3
EPSS 0.01
CVE-2021-27365 HIGH
Linux kernel <5.11.3 - Info Disclosure
Mar 07, 2021
CVSS 7.8
EPSS 0.02
Products
mysql 1,329 jre 799 jdk 787 solaris 555 database_server 516 vm_virtualbox 427 peoplesoft_enterprise_peopletools 355 e-business_suite 337 weblogic_server 322 fusion_middleware 313 mysql_server 278 linux 229 application_server 198 outside_in_technology 195 graalvm 188 jd_edwards_enterpriseone_tools 164 peoplesoft_products 158 enterprise_manager_base_platform 135 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 webcenter_portal 100 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 financial_services_analytical_applications_infrastructure 90
Quick Filters
Critical CVEs With Exploits In CISA KEV