Skip to contentOracle Graalvm vulnerabilities
- isaacs node-tar, tar project tar, oracle graalvm +1 more +3 moreArbitrary File Creation/Overwrite due to insufficient absolute path sanitizationCVE-2021-32804Public exploitFix availableEPSS 15.1%8.2 High
- isaacs node-tar, tar project tar, oracle graalvm +1 more +3 moreArbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoningCVE-2021-32803Fix available8.2 High
- oracle graalvm, debian linux, oracle jdk +3 more +5 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-2388Fix available7.5 High
- oracle graalvm, debian linux, fedoraproject fedora +4 more +6 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-2341Fix available3.1 Low
- oracle graalvm, debian linux, oracle jdk +3 more +5 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-2369Fix available4.3 Medium
- python, oracle communications cloud native core automated test suite, communications cloud native core binding support function +3 more +5 moreImproper input validation of octal strings in Python stdlib ipaddress 3.10 and below allows...CVE-2021-29921Fix available9.8 Critical
- oracle graalvm, debian linux, fedoraproject fedora +10 more +12 moreVulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of...CVE-2021-2161Fix available5.9 Medium
- oracle graalvm, debian linux, fedoraproject fedora +9 more +11 moreVulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of...CVE-2021-2163Fix available5.3 Medium
- openssl, fedoraproject fedora, freebsd +30 more +32 moreCA certificate check bypass with X509_V_FLAG_X509_STRICTCVE-2021-3450Public exploitFix availableEPSS 18.3%7.4 High
- openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 moreNULL pointer deref in signature_algorithms processingCVE-2021-3449Public exploitFix availableEPSS 63.5%5.9 Medium
- x-stream xstream, apache activemq, jmeter +14 more +16 moreA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-21349Public exploitFix availableEPSS 46.8%6.1 Medium
- ssri project ssri, oracle graalvm, siemens sinec infrastructure network services +2 moreRegular Expression Denial of Service (ReDoS)CVE-2021-27290Fix available7.5 High
- nodejs node, node.js, fedoraproject fedora +11 more +13 moreNode.js badCVE-2021-22884Fix availableEPSS 36.8%7.5 High
- nodejs node, node.js, fedoraproject fedora +7 more +9 moreNode.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack...CVE-2021-22883Fix availableEPSS 77.4%7.5 High
- openssl, apple ipados, iphone os +20 more +22 moreNull pointer deref in X509_issuer_and_serial_hash()CVE-2021-23841Public exploitFix available5.9 Medium
- openssl, debian linux, fujitsu m10-1 firmware +18 more +20 moreInteger overflow in CipherUpdateCVE-2021-23840Public exploitFix availableEPSS 51.1%7.5 High
- openssl, oracle business intelligence, enterprise manager for storage management +5 more +7 moreIncorrect SSLv2 rollback protectionCVE-2021-23839Fix available3.7 Low
- nodejs node, node.js, debian linux +3 more +5 moreNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in...CVE-2020-8287Public exploitFix availableEPSS 16.3%6.5 Medium
- nodejs node, node.js, debian linux +3 more +5 moreNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug...CVE-2020-8265Fix available8.1 High
- openssl, debian linux, fedoraproject fedora +41 more +43 moreEDIPARTYNAME NULL pointer dereferenceCVE-2020-1971Public exploitFix available5.9 Medium
- musl-libc musl, debian linux, fedoraproject fedora +1 more +3 moreIn musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer...CVE-2020-28928Fix available5.5 Medium
- nodejs node, node.js, c-ares project c-ares +6 more +8 moreUncontrolled Resource Consumption in nodeCVE-2020-8277Public exploitFix availableEPSS 54.2%7.5 High
- y18n project y18n, oracle graalvm, siemens sinec infrastructure network services +2 morePrototype PollutionCVE-2020-7774Fix availableEPSS 69.6%7.3 High
- debian linux, netapp 7-mode transition tool, active iq unified manager +18 more +20 moreVulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions...CVE-2020-14803Fix available5.3 Medium
- oracle graalvm, oracle corporation graalvm enterprise edition +1 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component:...CVE-2020-147187.2 High
- nodejs node.js, oracle banking extensibility workbench, blockchain platform +2 more +4 moreTLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and ...CVE-2020-8172Fix available7.4 High
- nghttp2, debian linux, fedoraproject fedora +7 more +9 moreDenial of service in nghttp2CVE-2020-11080Fix available3.7 Low
- oracle graalvm, oracle corporation graalvm enterprise edition +1 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component:...CVE-2020-29003.7 Low
- oracle graalvm, oracle corporation graalvm enterprise edition +1 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component:...CVE-2020-28027.7 High
- oracle graalvm, oracle corporation graalvm enterprise edition +1 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component:...CVE-2020-27996.3 Medium
- apache netbeans, oracle graalvm +1 moreImproper Verification of Cryptographic Signature in Apache NetbeansCVE-2019-17561Fix available7.5 High
- apache netbeans, oracle graalvm +1 moreImproper Certificate Validation in Apache NetbeansCVE-2019-17560Fix available9.1 Critical
- nodejs node, debian linux, nodejs node.js +5 more +7 moreIncluding trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of...CVE-2019-15606Fix availableEPSS 20.0%9.8 Critical
- nodejs node, node.js, debian linux +8 more +10 moreImproper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when...CVE-2019-15604Fix availableEPSS 20.0%7.5 High
- nodejs node, node.js, debian linux +11 more +13 moreHTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer...CVE-2019-15605Public exploitFix availableEPSS 57.1%9.8 Critical
- oracle graalvm, oracle corporation java, canonical ubuntu linux +25 more +27 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: Java...CVE-2020-2604Fix available8.1 High
- oracle graalvm, oracle corporation graalvm enterprise edition +1 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component:...CVE-2020-25955.8 Medium
- oracle graalvm, oracle corporation graalvm enterprise edition +1 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: LLVM...CVE-2020-25814.0 Medium
- cli, npmjs npm, fedoraproject fedora +4 more +6 moreArbitrary File Overwrite in npm CLICVE-2019-16777Fix available7.7 High
- cli, npmjs npm, fedoraproject fedora +4 more +6 moreUnauthorized File Access in npm CLI before before version 6.13.3CVE-2019-16776Fix available7.7 High
- cli, npmjs npm, fedoraproject fedora +4 more +6 moreUnauthorized File Access in npm CLI before before version 6.13.3CVE-2019-16775Fix available7.7 High
- ruby-lang ruby, debian linux, opensuse leap +1 more +3 moreRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the...CVE-2019-16255Fix available8.1 High
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- oracle graalvm, oracle corporation java, netapp e-series santricity os controller +10 more +12 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: Java...CVE-2019-2989Fix available6.8 Medium
- oracle graalvm, oracle corporation graalvm enterprise edition +1 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: LLVM...CVE-2019-29867.7 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +15 more +17 moreSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of serviceCVE-2019-9518Fix availableEPSS 25.4%7.5 High
- apache http server, traffic server, apple swiftnio +20 more +22 moreSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of serviceCVE-2019-9517Fix availableEPSS 27.0%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +16 more +18 moreSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of serviceCVE-2019-9516Fix availableEPSS 57.5%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +19 more +21 moreSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of serviceCVE-2019-9515Fix availableEPSS 87.3%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +25 more +27 moreSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of serviceCVE-2019-9514Fix availableEPSS 82.8%7.5 High
- Show moreLoading…