oracle

10,484 tracked vulnerabilities.

CVE-2022-20615 MEDIUM
Jenkins Matrix Project Plugin <1.19 - XSS
Jan 12, 2022
CVSS 5.4
EPSS 0.82
CVE-2022-20614 MEDIUM
Jenkins Mailer Plugin <391.ve4a_38c1f - Info Disclosure
Jan 12, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-20613 MEDIUM
Jenkins Mailer Plugin <391.ve4a_38c1b_cf4b - CSRF
Jan 12, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-20612 MEDIUM
Jenkins < 2.319.1 and 2.320-2.329 - Cross-Site Request Forgery
Jan 12, 2022
CVSS 4.3
EPSS 0.02
CVE-2021-43395 MEDIUM
illumos <f859e7171bb5db34321e45585839c6c3200ebb90 - Info Disclosure
Dec 26, 2022
CVSS 5.5
EPSS 0.00
CVE-2021-41041 MEDIUM
Eclipse Openj9 <0.32.0 - Code Injection
Apr 27, 2022
CVSS 5.3
EPSS 0.01
CVE-2021-4203 MEDIUM
Linux Kernel - Use After Free
Mar 25, 2022
CVSS 6.8
EPSS 0.02
CVE-2021-4157 HIGH
Linux Kernel 4.0-4.4.268 - Memory Corruption in NFS Mirroring
Mar 25, 2022
CVSS 8.0
EPSS 0.02
CVE-2021-4197 HIGH
Linux Kernel 4.2-4.14.276 - Privilege Escalation via Unprivileged Write to File Handler
Mar 23, 2022
CVSS 7.8
EPSS 0.01
CVE-2021-38296 HIGH
Apache Spark <3.1.2 - Info Disclosure
Mar 10, 2022
CVSS 7.5
EPSS 0.02
CVE-2021-3737 HIGH
Python >=3.6.0 <3.6.14 - Denial of Service via HTTP Response Handling
Mar 04, 2022
CVSS 7.5
EPSS 0.12
CVE-2021-3744 MEDIUM
Linux Kernel < 5.15 - Use-After-Free in ccp_run_aes_gcm_cmd
Mar 04, 2022
CVSS 5.5
EPSS 0.01
CVE-2021-3743 HIGH
Linux Kernel 5.14.1-5.16 - Out-of-Bounds Read in Qualcomm IPC Router Protocol
Mar 04, 2022
CVSS 7.1
EPSS 0.01
CVE-2021-4002 MEDIUM
Linux Kernel < 5.16 - Use-After-Free in hugetlbfs Memory Mapping
Mar 03, 2022
CVSS 4.4
EPSS 0.01
CVE-2021-3772 MEDIUM
Linux Kernel < 5.15.0 - Denial of Service via Spoofed SCTP Chunks
Mar 02, 2022
CVSS 6.5
EPSS 0.01
CVE-2021-44533 MEDIUM
Node.js Certificate Validation Flaw via Multi-Value RDN
Feb 24, 2022
CVSS 5.3
EPSS 0.09
CVE-2021-44532 MEDIUM
Node.js < 12.22.9, < 14.18.3, < 16.13.2, < 17.3.1 - Code Injection
Feb 24, 2022
CVSS 5.3
EPSS 0.10
CVE-2021-44531 HIGH
Node.js < 12.22.9, < 14.18.3, < 16.13.2, < 17.3.1 - Improper Certificate Validation via URI SAN Type
Feb 24, 2022
CVSS 7.4
EPSS 0.08
CVE-2021-35689 CRITICAL
Oracle Talent Acquisition Cloud - Taleo Enterprise Edition - RCE
Feb 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2021-4115 MEDIUM
polkit - Unauthenticated Denial of Service via File Descriptor Exhaustion
Feb 21, 2022
CVSS 5.5
EPSS 0.01
CVE-2021-20322 HIGH
Linux Kernel < 5.14.21 - UDP Port Scan via ICMP Error Message Processing
Feb 18, 2022
CVSS 7.4
EPSS 0.07
CVE-2021-3773 CRITICAL
Linux Kernel < 5.14 - Exposure of Sensitive Information via netfilter
Feb 16, 2022
CVSS 9.8
EPSS 0.05
CVE-2021-3752 HIGH
Linux Kernel 2.6.12-4.4.293 - Use-After-Free via Bluetooth Socket Race Condition
Feb 16, 2022
CVSS 7.1
EPSS 0.02
CVE-2021-3551 HIGH
dogtagpki 10.10.0-10.10.5 - Cleartext Storage of Sensitive Information in Installation Log File
Feb 16, 2022
CVSS 7.8
EPSS 0.00
CVE-2021-43859 HIGH
XStream <1.4.19 - DoS
Feb 01, 2022
CVSS 7.5
EPSS 0.08
Products
mysql 1,329 jre 799 jdk 787 solaris 555 database_server 516 vm_virtualbox 427 peoplesoft_enterprise_peopletools 355 e-business_suite 337 weblogic_server 322 fusion_middleware 313 mysql_server 278 linux 229 application_server 198 outside_in_technology 195 graalvm 188 jd_edwards_enterpriseone_tools 164 peoplesoft_products 158 enterprise_manager_base_platform 135 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 webcenter_portal 100 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 financial_services_analytical_applications_infrastructure 90
Quick Filters
Critical CVEs With Exploits In CISA KEV