oracle

10,484 tracked vulnerabilities.

CVE-2021-27364 HIGH
Linux kernel <5.11.3 - Info Disclosure
Mar 07, 2021
CVSS 7.1
EPSS 0.01
CVE-2021-28041 HIGH
ssh-agent <8.5 - Use After Free
Mar 05, 2021
CVSS 7.1
EPSS 0.03
CVE-2021-22884 HIGH
Node.js <10.24.0, 12.21.0, 14.16.0, 15.10.0 - Info Disclosure
Mar 03, 2021
CVSS 7.5
EPSS 0.32
CVE-2021-22883 HIGH
Node.js <10.24.0,12.21.0,14.16.0,15.10.0 - DoS
Mar 03, 2021
CVSS 7.5
EPSS 0.77
CVE-2021-2138 MEDIUM
Oracle Cloud Infrastructure Data Science Notebook Sessions - Privil...
Mar 03, 2021
CVSS 4.6
EPSS 0.00
CVE-2021-25329 HIGH
Apache Tomcat <10.0.0, 9.0.42+, 8.5.62+, 7.0.108+ - RCE
Mar 01, 2021
CVSS 7.0
EPSS 0.09
CVE-2021-25122 HIGH
Apache Tomcat <10.0.0,9.0.41,8.5.61 - Info Disclosure
Mar 01, 2021
CVSS 7.5
EPSS 0.18
CVE-2021-22112 HIGH
Spring Security <5.4.4-<5.3.8.RELEASE-<5.2.9.RELEASE - Privilege Es...
Feb 23, 2021
CVSS 8.8
EPSS 0.03
CVE-2021-27568 MEDIUM
netplex json-smart-v1/v2 - Info Disclosure
Feb 23, 2021
CVSS 5.9
EPSS 0.03
CVE-2021-22174 LOW
Wireshark 3.4.0-3.4.2 - Denial of Service in USB HID Dissector
Feb 17, 2021
CVSS 3.7
EPSS 0.03
CVE-2021-22173 LOW
Wireshark 3.4.0-3.4.2 - Denial of Service via USB HID Dissector Memory Leak
Feb 17, 2021
CVSS 3.7
EPSS 0.02
CVE-2021-23841 MEDIUM
OpenSSL 1.0.2-1.0.2x and 1.1.1-1.1.1i - Denial of Service via X509_issuer_and_serial_hash NULL Pointer Dereference
Feb 16, 2021
CVSS 5.9
EPSS 0.07
CVE-2021-23840 HIGH
OpenSSL 1.0.2-1.0.2x and 1.1.1-1.1.1i - Integer Overflow in EVP_CipherUpdate
Feb 16, 2021
CVSS 7.5
EPSS 0.51
CVE-2021-23839 LOW
OpenSSL 1.0.2s-1.0.2x - Version Rollback Attack via RSA Padding Check Inversion
Feb 16, 2021
CVSS 3.7
EPSS 0.03
CVE-2021-23337 HIGH NUCLEI
Lodash <4.17.21 - Command Injection
Feb 15, 2021
CVSS 7.2
EPSS 0.22
CVE-2021-23336 MEDIUM
Python/cpython <3.6.13, <3.7.10, <3.8.8, <3.9.2 - Web Cache Poisoning
Feb 15, 2021
CVSS 5.9
EPSS 0.36
CVE-2021-21702 MEDIUM
PHP 7.3.0-7.3.26 - Denial of Service via SOAP Extension Null Pointer Dereference
Feb 15, 2021
CVSS 5.3
EPSS 0.03
CVE-2021-21290 MEDIUM
Netty <4.1.59.Final - Info Disclosure
Feb 08, 2021
CVSS 6.2
EPSS 0.02
CVE-2021-3345 HIGH
Libgcrypt 1.9.0 - Heap-Based Buffer Overflow in _gcry_md_block_write
Jan 29, 2021
CVSS 7.8
EPSS 0.01
CVE-2021-3326 HIGH
glibc < 2.32.0 - Denial of Service via ISO-2022-JP-3 Encoding Assertion Failure
Jan 27, 2021
CVSS 7.5
EPSS 0.03
CVE-2021-26117 HIGH
Apache ActiveMQ 5.15.0-5.15.13 and 5.16.0 - Improper Authentication via LDAP Anonymous Bind
Jan 27, 2021
CVSS 7.5
EPSS 0.11
CVE-2021-3156 HIGH KEVNUCLEI
Sudo Heap-Based Buffer Overflow
Jan 26, 2021
CVSS 7.8
EPSS 0.99
CVE-2021-26272 MEDIUM
CKEditor 4.0-4.15 - Regular Expression Denial of Service via Autolink Plugin
Jan 26, 2021
CVSS 6.5
EPSS 0.02
CVE-2021-26271 MEDIUM
CKEditor 4 < 4.16 - Regular Expression Denial of Service via Styles Input Dialog
Jan 26, 2021
CVSS 6.5
EPSS 0.02
CVE-2021-21275 MEDIUM
MediaWiki Report Extension < 2021-01-21 - Cross-Site Request Forgery via Special:Report
Jan 25, 2021
CVSS 5.3
EPSS 0.01
Products
mysql 1,329 jre 799 jdk 787 solaris 555 database_server 516 vm_virtualbox 427 peoplesoft_enterprise_peopletools 355 e-business_suite 337 weblogic_server 322 fusion_middleware 313 mysql_server 278 linux 229 application_server 198 outside_in_technology 195 graalvm 188 jd_edwards_enterpriseone_tools 164 peoplesoft_products 158 enterprise_manager_base_platform 135 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 webcenter_portal 100 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 financial_services_analytical_applications_infrastructure 90
Quick Filters
Critical CVEs With Exploits In CISA KEV