Oracle Nosql Database vulnerabilities

• netty, debian linux, netapp oncommand api services +15 more +17 more Possible request smuggling in HTTP/2 due missing validation of content-length CVE-2021-21409 Fix available 5.9 MediumMarch 30, 2021
• nodejs node, node.js, fedoraproject fedora +11 more +13 more Node.js bad CVE-2021-22884 Fix available EPSS 36.8% 7.5 HighFebruary 24, 2021
• nodejs node, node.js, fedoraproject fedora +7 more +9 more Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack... CVE-2021-22883 Fix available EPSS 77.4% 7.5 HighFebruary 24, 2021
• openssl, debian linux, fujitsu m10-1 firmware +18 more +20 more Integer overflow in CipherUpdate CVE-2021-23840 Public exploitFix available EPSS 50.7% 7.5 HighFebruary 16, 2021
• netty, debian linux, netapp active iq unified manager +10 more +12 more Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files CVE-2021-21290 Fix available 6.2 MediumFebruary 8, 2021
• google guava, netapp active iq unified manager, oracle commerce guided search +10 more +12 more Temp directory permission issue in Guava CVE-2020-8908 Fix available 3.3 LowDecember 10, 2020
• apache httpclient, netapp active iq unified manager, snapcenter +14 more +16 more Cross-site scripting in Apache HttpClient CVE-2020-13956 Fix available 5.3 MediumOctober 10, 2020
• netty, debian linux, fedoraproject fedora +10 more +12 more Denial of Service in Netty CVE-2020-11612 Fix available 7.5 HighApril 7, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• apache thrift, debian linux, f5 traffix signaling delivery controller +2 more +4 more Improper Input Validation in Apache Thrift CVE-2018-1320 Fix available 7.5 HighJanuary 7, 2019
• fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +22 more +24 more Arbitrary Code Execution in jackson-databind CVE-2018-14718 Fix available EPSS 12.7% 9.8 CriticalJanuary 2, 2019
• fasterxml jackson-modules-java8, netapp active iq unified manager, oracle clusterware +3 more +5 more Moderate severity vulnerability that affects com.fasterxml.jackson.datatype:jackson-datatype-jsr353 CVE-2018-1000873 Fix available 6.5 MediumDecember 20, 2018