Skip to contentOracle Enterprise Manager Ops Center vulnerabilities
- openssl, debian linux, fedoraproject fedora +37 more +39 moreThe c_rehash script allows command injectionCVE-2022-1292Public exploitFix availableEPSS 82.6%7.3 High
- apache http server, apple mac os x, macos +4 more +6 morecore: Possible buffer overflow with very large or unlimited LimitXMLRequestBodyCVE-2022-22721Fix availableEPSS 41.9%9.1 Critical
- apache http server, apple mac os x, macos +4 more +6 moreHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlierCVE-2022-22720Public exploitFix availableEPSS 28.2%9.8 Critical
- openssl, debian linux, oracle enterprise manager ops center +5 more +7 moreBN_mod_exp may produce incorrect results on MIPSCVE-2021-4160Fix available5.9 Medium
- apache log4j, apache software foundation log4j2, debian linux +114 more +116 moreApache Log4j2 does not always protect from infinite recursion in lookup evaluationCVE-2021-45105Public exploitFix availableEPSS 100.0%5.9 Medium
- apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 moremod_proxy SSRFCVE-2021-40438In KEVPublic exploitFix availableEPSS 100.0%9.0 Critical
- oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 moreVulnerability in the Advanced Networking Option component of Oracle Database Server. Supported...CVE-2021-23518.3 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreNULL pointer dereference on specially crafted HTTP/2 requestCVE-2021-31618Fix availableEPSS 52.1%7.5 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreUnexpected URL matching with 'MergeSlashes OFF'CVE-2021-30641Fix availableEPSS 51.8%5.3 Medium
- apache http server, debian linux, fedoraproject fedora +5 more +7 moreApache HTTP Server mod_session response handling heap overflowCVE-2021-26691Fix availableEPSS 68.1%9.8 Critical
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_session NULL pointer dereferenceCVE-2021-26690Public exploitFix availableEPSS 65.1%7.5 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_auth_digest possible stack overflow by one nul byteCVE-2020-35452Fix availableEPSS 53.2%7.3 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_proxy_http NULL pointer dereferenceCVE-2020-13950Fix availableEPSS 50.0%7.5 High
- apache http server, fedoraproject fedora, oracle enterprise manager ops center +2 more +4 moremod_proxy_wstunnel tunneling of non Upgraded connectionsCVE-2019-17567Fix availableEPSS 59.7%5.3 Medium
- the wireshark foundation wireshark, debian linux, oracle enterprise manager ops center +2 more +4 moreInfinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via...CVE-2021-22222Fix available7.5 High
- python urllib3, fedoraproject fedora, oracle enterprise manager ops center +2 more +4 moreCatastrophic backtracking in URL authority parser when passed URL containing many @ charactersCVE-2021-33503Fix available7.5 High
- x-stream xstream, debian linux, fedoraproject fedora +14 more +16 moreXStream is vulnerable to a Remote Command Execution attackCVE-2021-29505Public exploitFix availableEPSS 77.2%7.5 High
- gnome libxml2, debian linux, fedoraproject fedora +19 more +21 moreNokogiri Implements libxml2 version vulnerable to null pointer dereferencingCVE-2021-3537Fix available5.9 Medium
- gnome libxml2, debian linux, fedoraproject fedora +18 more +20 moreNokogiri Implements libxml2 version vulnerable to use-after-freeCVE-2021-3518Fix availableEPSS 21.9%8.8 High
- openssl, apple ipados, iphone os +20 more +22 moreNull pointer deref in X509_issuer_and_serial_hash()CVE-2021-23841Public exploitFix available5.9 Medium
- openssl, debian linux, fujitsu m10-1 firmware +18 more +20 moreInteger overflow in CipherUpdateCVE-2021-23840Public exploitFix availableEPSS 51.1%7.5 High
- openssl, oracle business intelligence, enterprise manager for storage management +5 more +7 moreIncorrect SSLv2 rollback protectionCVE-2021-23839Fix available3.7 Low
- python, debian linux, djangoproject django +12 more +14 moreWeb Cache PoisoningCVE-2021-23336Fix availableEPSS 41.1%5.9 Medium
- oracle workflow, data integrator, enterprise manager ops center +2 moreVulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist)....CVE-2021-20158.2 High
- oracle zfs storage appliance, enterprise manager ops center, hyperion infrastructure technology +1 more +3 moreVulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: RAS...CVE-2021-19995.0 Medium
- oracle database server, enterprise manager ops center, hyperion infrastructure technology +2 more +4 moreVulnerability in the Java VM component of Oracle Database Server. Supported versions that are...CVE-2021-19934.8 Medium
- python, debian linux, fedoraproject fedora +10 more +12 morePython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...CVE-2021-3177Fix availableEPSS 24.0%9.8 Critical
- openssl, debian linux, fedoraproject fedora +41 more +43 moreEDIPARTYNAME NULL pointer dereferenceCVE-2020-1971Public exploitFix available5.9 Medium
- xmlsoft libxml2, debian linux, fedoraproject fedora +18 more +20 moreGNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow vulnerability in...CVE-2020-24977Fix available6.5 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...CVE-2020-11993Fix availableEPSS 56.6%7.5 High
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCECVE-2020-11984Public exploitFix availableEPSS 90.0%9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +22 more +24 moreApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'...CVE-2020-9490Fix availableEPSS 88.8%7.5 High
- sqlite, apple icloud, ipados +16 more +18 moreIn SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a...CVE-2020-15358Fix available5.5 Medium
- python, fedoraproject fedora, opensuse leap +4 more +6 moreIncorrect Calculation and Use of Insufficiently Random Values in PythonCVE-2020-14422Fix availableEPSS 12.7%5.9 Medium
- sqlite, debian linux, fedoraproject fedora +12 more +14 moreSQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite...CVE-2020-13871Fix available7.5 High
- apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 moreSensitive Data Exposure in Apache AntCVE-2020-1945Fix available6.3 Medium
- jquery, debian linux, drupal +67 more +69 morejQuery has a potential XSS vulnerabilityCVE-2020-11022Public exploitFix availableEPSS 99.2%6.9 Medium
- openssl, broadcom fabric operating system, debian linux +23 more +25 moreSegmentation fault in SSL_check_chainCVE-2020-1967Public exploitFix availableEPSS 53.3%7.5 High
- sqlite, canonical ubuntu linux, debian linux +18 more +20 moreSQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a...CVE-2020-11655Fix available7.5 High
- sqlite, netapp ontap select deploy administration utility, oracle communications messaging server +12 more +14 moreIn SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by...CVE-2020-11656Fix available9.8 Critical
- apache http server, broadcom brocade fabric operating system, canonical ubuntu linux +11 more +13 moreIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...CVE-2020-1927Fix availableEPSS 56.7%6.1 Medium
- apache http server, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...CVE-2020-1934Fix availableEPSS 52.0%5.3 Medium
- sqlite, canonical ubuntu linux, netapp cloud backup +11 more +13 moreIn SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference...CVE-2020-9327Fix available7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +24 more +26 morelibxml as used in Nokogiri has an infinite loop in a certain end-of-file situationCVE-2020-7595Fix available7.5 High
- xmlsoft libxml2, debian linux, fedoraproject fedora +24 more +26 morexmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.CVE-2019-20388Fix available7.5 High
- openssl, canonical ubuntu linux, debian linux +6 more +8 morersaz_512_sqr overflow bug on x86_64CVE-2019-1551Fix availableEPSS 14.3%5.3 Medium
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- curl, debian linux, fedoraproject fedora +17 more +19 moreHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.CVE-2019-5482Fix availableEPSS 17.9%9.8 Critical
- curl, debian linux, fedoraproject fedora +12 more +14 moreDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.CVE-2019-5481Fix available9.8 Critical
- apache http server, oracle communications element manager, communications session report manager +4 more +6 moreIn Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted...CVE-2019-10097Fix availableEPSS 52.9%7.2 High
- Show olderLoading…