Oracle Instantis Enterprisetrack vulnerabilities

• apache http server, apple mac os x, macos +8 more +10 more Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier CVE-2021-44224 Fix available EPSS 82.3% 8.2 HighDecember 20, 2021
• apache http server, apple mac os x, macos +10 more +12 more Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier CVE-2021-44790 Public exploitFix available EPSS 96.8% 9.8 CriticalDecember 20, 2021
• apache log4j, apache software foundation log4j2, debian linux +114 more +116 more Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• apache http server, fedoraproject fedora, netapp cloud backup +3 more +5 more Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) CVE-2021-42013 In KEVPublic exploitFix available EPSS 100.0% 9.8 CriticalOctober 7, 2021
• apache http server, fedoraproject fedora, netapp cloud backup +1 more +3 more Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 CVE-2021-41773 In KEVPublic exploitFix available EPSS 100.0% 9.8 CriticalOctober 5, 2021
• apache http server, fedoraproject fedora, netapp cloud backup +1 more +3 more null pointer dereference in h2 fuzzing CVE-2021-41524 Fix available EPSS 25.8% 7.5 HighOctober 5, 2021
• apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 more mod_proxy SSRF CVE-2021-40438 In KEVPublic exploitFix available EPSS 100.0% 9.0 CriticalSeptember 16, 2021
• apache http server, debian linux, fedoraproject fedora +7 more +9 more ap_escape_quotes buffer overflow CVE-2021-39275 Fix available EPSS 39.4% 9.8 CriticalSeptember 16, 2021
• apache http server, broadcom brocade fabric operating system firmware, debian linux +9 more +11 more mod_proxy_uwsgi out of bound read CVE-2021-36160 Fix available EPSS 63.7% 7.5 HighSeptember 16, 2021
• apache http server, broadcom brocade fabric operating system firmware, debian linux +14 more +16 more NULL pointer dereference in httpd core CVE-2021-34798 Fix available EPSS 64.5% 7.5 HighSeptember 16, 2021
• oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 more Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported... CVE-2021-2351 8.3 HighJuly 20, 2021
• apache tomcat, tomee, debian linux +19 more +21 more Incorrect Transfer-Encoding handling with HTTP/1.0 CVE-2021-33037 Fix available EPSS 74.7% 5.3 MediumJuly 12, 2021
• apache http server, debian linux, fedoraproject fedora +3 more +5 more NULL pointer dereference on specially crafted HTTP/2 request CVE-2021-31618 Fix available EPSS 52.1% 7.5 HighJune 15, 2021
• apache http server, debian linux, fedoraproject fedora +3 more +5 more Unexpected URL matching with 'MergeSlashes OFF' CVE-2021-30641 Fix available EPSS 51.8% 5.3 MediumJune 10, 2021
• apache http server, debian linux, fedoraproject fedora +5 more +7 more Apache HTTP Server mod_session response handling heap overflow CVE-2021-26691 Fix available EPSS 68.1% 9.8 CriticalJune 10, 2021
• apache http server, debian linux, fedoraproject fedora +3 more +5 more mod_session NULL pointer dereference CVE-2021-26690 Public exploitFix available EPSS 65.1% 7.5 HighJune 10, 2021
• apache http server, debian linux, fedoraproject fedora +3 more +5 more mod_auth_digest possible stack overflow by one nul byte CVE-2020-35452 Fix available EPSS 53.2% 7.3 HighJune 10, 2021
• apache http server, debian linux, fedoraproject fedora +3 more +5 more mod_proxy_http NULL pointer dereference CVE-2020-13950 Fix available EPSS 50.0% 7.5 HighJune 10, 2021
• apache http server, fedoraproject fedora, oracle enterprise manager ops center +2 more +4 more mod_proxy_wstunnel tunneling of non Upgraded connections CVE-2019-17567 Fix available EPSS 59.7% 5.3 MediumJune 10, 2021
• the wireshark foundation wireshark, debian linux, oracle enterprise manager ops center +2 more +4 more Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via... CVE-2021-22222 Fix available 7.5 HighJune 7, 2021
• python urllib3, fedoraproject fedora, oracle enterprise manager ops center +2 more +4 more Catastrophic backtracking in URL authority parser when passed URL containing many @ characters CVE-2021-33503 Fix available 7.5 HighJune 1, 2021
• apache tomcat, debian linux, oracle agile product lifecycle management +9 more +11 more Incomplete fix for CVE-2020-9484 CVE-2021-25329 Fix available 7.0 HighMarch 1, 2021
• apache tomcat, debian linux, oracle agile product lifecycle management +9 more +11 more Apache Tomcat h2c request mix-up CVE-2021-25122 Fix available EPSS 18.1% 7.5 HighMarch 1, 2021
• apache batik, debian linux, fedoraproject fedora +19 more +21 more Server-side request forgery (SSRF) in Apache Batik CVE-2020-11987 Fix available EPSS 13.6% 8.2 HighFebruary 24, 2021
• apache tomcat, debian linux, netapp element plug-in +9 more +11 more Apache Tomcat: Request header mix-up between HTTP/2 streams CVE-2020-17527 Public exploitFix available EPSS 24.6% 7.5 HighDecember 3, 2020
• apache tomcat, debian linux, oracle instantis enterprisetrack +1 more +3 more Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2020-13943 Fix available EPSS 52.6% 4.3 MediumOctober 12, 2020
• apache http server, canonical ubuntu linux, debian linux +10 more +12 more Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module... CVE-2020-11993 Fix available EPSS 56.6% 7.5 HighAugust 7, 2020
• apache http server, canonical ubuntu linux, debian linux +10 more +12 more Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE CVE-2020-11984 Public exploitFix available EPSS 90.0% 9.8 CriticalAugust 7, 2020
• apache http server, canonical ubuntu linux, debian linux +22 more +24 more Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'... CVE-2020-9490 Fix available EPSS 88.8% 7.5 HighAugust 7, 2020
• apache tomcat, canonical ubuntu linux, debian linux +15 more +17 more Infinite Loop in Apache Tomcat CVE-2020-13935 Public exploitFix available EPSS 86.6% 7.5 HighJuly 14, 2020
• apache tomcat, canonical ubuntu linux, debian linux +11 more +13 more Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat CVE-2020-13934 Fix available EPSS 64.1% 7.5 HighJuly 14, 2020
• apache batik, oracle api gateway, business intelligence +15 more +17 more Server-side request forgery (SSRF) in Apache Batik CVE-2019-17566 Fix available EPSS 10.9% 7.5 HighJune 22, 2020
• apache tomcat, canonical ubuntu linux, debian linux +23 more +25 more Potential remote code execution in Apache Tomcat CVE-2020-9484 Public exploitFix available EPSS 55.5% 7.0 HighMay 11, 2020
• sqlite, canonical ubuntu linux, debian linux +18 more +20 more SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a... CVE-2020-11655 Fix available 7.5 HighApril 9, 2020
• apache http server, broadcom brocade fabric operating system, canonical ubuntu linux +11 more +13 more In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended... CVE-2020-1927 Fix available EPSS 56.7% 6.1 MediumApril 1, 2020
• apache http server, canonical ubuntu linux, debian linux +8 more +10 more In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying... CVE-2020-1934 Fix available EPSS 52.0% 5.3 MediumApril 1, 2020
• apache tomcat, geode, blackberry good control +18 more +20 more Improper Privilege Management in Tomcat CVE-2020-1938 In KEVPublic exploitFix available EPSS 99.3% 9.8 CriticalFebruary 24, 2020
• apache tomcat, canonical ubuntu linux, debian linux +17 more +19 more Potential HTTP request smuggling in Apache Tomcat CVE-2020-1935 Fix available 4.8 MediumFebruary 24, 2020
• apache tomcat, tomee, debian linux +13 more +15 more Potential HTTP request smuggling in Apache Tomcat CVE-2019-17569 Fix available 4.8 MediumFebruary 24, 2020
• apache cordova, cordova inappbrowser, oracle instantis enterprisetrack +1 more +3 more Privilege Escalation in cordova-plugin-inappbrowser CVE-2019-0219 Fix available 9.8 CriticalJanuary 14, 2020
• apache tomcat, canonical ubuntu linux, debian linux +8 more +10 more In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack CVE-2019-17563 Fix available EPSS 10.7% 7.5 HighDecember 23, 2019
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• apache poi, oracle application testing suite, banking enterprise originations +24 more +26 more Improper Restriction of XML External Entity Reference in Apache POI CVE-2019-12415 Fix available 5.5 MediumOctober 23, 2019
• apache http server, oracle communications element manager, communications session report manager +4 more +6 more In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted... CVE-2019-10097 Fix available EPSS 52.9% 7.2 HighAugust 28, 2019
• apache http server, oracle communications element manager, enterprise manager ops center +2 more +4 more In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling... CVE-2019-10082 Fix available EPSS 16.5% 9.1 CriticalAugust 14, 2019
• apache http server, traffic server, apple swiftnio +20 more +22 more Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service CVE-2019-9517 Fix available EPSS 27.0% 7.5 HighAugust 13, 2019
• apache axis 1.4, axis, oracle agile engineering data management +35 more +37 more Server Side Request Forgery in Apache Axis CVE-2019-0227 Public exploitFix available EPSS 91.9% 7.5 HighMay 1, 2019
• apache http server, canonical ubuntu linux, fedoraproject fedora +7 more +9 more A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a... CVE-2019-0197 Fix available 4.2 MediumApril 4, 2019
• apache http server, canonical ubuntu linux, debian linux +23 more +25 more In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code... CVE-2019-0211 In KEVPublic exploitFix available EPSS 65.0% 7.8 HighApril 2, 2019
• apache http server, oracle enterprise manager ops center, hospitality guest access +2 more +4 more A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a... CVE-2019-0190 Fix available EPSS 59.9% 7.5 HighJanuary 30, 2019
• Show olderLoading…