Skip to contentOracle Peopletools vulnerabilities
- nodejs node, node.js, netapp active iq unified manager +8 more +10 moreNode.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS,...CVE-2021-22931Fix availableEPSS 22.0%9.8 Critical
- ckeditor, ckeditor ckeditor4, debian linux +10 more +12 moreExecution of JavaScript code using malformed HTML in ckeditorCVE-2021-37695Fix available7.3 High
- ckeditor, ckeditor ckeditor4, fedoraproject fedora +8 more +10 moreArbitrary HTML injection vulnerability in ckeditorCVE-2021-32809Fix available4.6 Medium
- ckeditor, ckeditor ckeditor4, fedoraproject fedora +11 more +13 moreCross-site scripting in ckeditor via abuse of undo functionalityCVE-2021-32808Fix available7.6 High
- haxx curl, netapp active iq unified manager, clustered data ontap +19 more +21 morelibcurl-using applications can ask for a specific client certificate to be used in a transfer....CVE-2021-22926Fix availableEPSS 15.1%7.5 High
- haxx curl, apple mac os x, macos +20 more +22 morecurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...CVE-2021-22925Fix available5.3 Medium
- haxx libcurl, debian linux, fedoraproject fedora +33 more +35 morelibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...CVE-2021-22924Public exploitFix available3.7 Low
- oracle peoplesoft enterprise pt peopletoolsVulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component...CVE-2021-24086.1 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2021-24075.3 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2021-23774.3 Medium
- oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 moreVulnerability in the Advanced Networking Option component of Oracle Database Server. Supported...CVE-2021-23518.3 High
- apache commons compress, netapp active iq unified manager, oncommand insight +31 more +33 moreApache Commons Compress 1.0 to 1.20 denial of service vulnerabilityCVE-2021-36090Fix availableEPSS 12.9%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +24 more +26 moreApache Commons Compress 1.1 to 1.20 denial of service vulnerabilityCVE-2021-35517Fix availableEPSS 10.6%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +21 more +23 moreApache Commons Compress 1.6 to 1.20 denial of service vulnerabilityCVE-2021-35516Fix availableEPSS 12.4%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +23 more +25 moreApache Commons Compress 1.6 to 1.20 denial of service vulnerabilityCVE-2021-35515Fix availableEPSS 11.6%7.5 High
- gnome libxml2, debian linux, fedoraproject fedora +19 more +21 moreNokogiri Implements libxml2 version vulnerable to null pointer dereferencingCVE-2021-3537Fix available5.9 Medium
- gnome libxml2, debian linux, fedoraproject fedora +18 more +20 moreNokogiri Implements libxml2 version vulnerable to use-after-freeCVE-2021-3518Fix availableEPSS 21.9%8.8 High
- gnome libxml2, debian linux, fedoraproject fedora +28 more +30 moreNokogiri contains libxml Out-of-bounds Write vulnerabilityCVE-2021-3517Fix availableEPSS 17.0%8.6 High
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2021-22197.4 High
- oracle peoplesoft enterprise pt peopletoolsVulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component...CVE-2021-22188.3 High
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2021-22166.1 Medium
- openssl, fedoraproject fedora, freebsd +30 more +32 moreCA certificate check bypass with X509_V_FLAG_X509_STRICTCVE-2021-3450Public exploitFix availableEPSS 18.3%7.4 High
- openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 moreNULL pointer deref in signature_algorithms processingCVE-2021-3449Public exploitFix availableEPSS 63.5%5.9 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to a Remote Command Execution attackCVE-2021-21345Public exploitFix availableEPSS 72.3%5.8 Medium
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +16 more +18 moreA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the fileCVE-2021-27906Fix available5.5 Medium
- python urllib3, fedoraproject fedora, oracle peoplesoft enterprise peopletools +3 more +5 moreUsing default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connectionCVE-2021-28363Fix available6.5 Medium
- nodejs node, node.js, fedoraproject fedora +11 more +13 moreNode.js badCVE-2021-22884Fix availableEPSS 36.8%7.5 High
- nodejs node, node.js, fedoraproject fedora +7 more +9 moreNode.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack...CVE-2021-22883Fix availableEPSS 77.4%7.5 High
- json-smart project json-smart-v1, json-smart-v2, oracle communications cloud native core policy +4 more +6 moreImproper Check for Unusual or Exceptional Conditions in json-smartCVE-2021-27568Public exploitFix available5.9 Medium
- openssl, apple ipados, iphone os +20 more +22 moreNull pointer deref in X509_issuer_and_serial_hash()CVE-2021-23841Public exploitFix available5.9 Medium
- lodash, netapp active iq unified manager, cloud manager +20 more +22 moreCommand InjectionCVE-2021-23337Public exploitFix availableEPSS 20.2%7.2 High
- lodash, oracle banking corporate lending process management, banking credit facilities process management +16 more +18 moreRegular Expression Denial of Service (ReDoS)CVE-2020-28500Fix available5.3 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2021-20718.1 High
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2021-20638.4 High
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2021-20436.1 Medium
- apache xmlbeans, debian linux, netapp oncommand unified manager core package +4 more +6 moreXMLBeans XML Entity ExpansionCVE-2021-23926Fix available9.1 Critical
- apache karaf, bouncycastle bc-java, oracle banking corporate lending process management +17 more +19 moreLogic error in Legion of the Bouncy Castle BC JavaCVE-2020-28052Public exploitFix available8.1 High
- google guava, netapp active iq unified manager, oracle commerce guided search +10 more +12 moreTemp directory permission issue in GuavaCVE-2020-8908Fix available3.3 Low
- apple mac os x, macos, debian linux +22 more +24 morecurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...CVE-2020-8285Fix available7.5 High
- apple mac os x, macos, debian linux +17 more +19 morecurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...CVE-2020-8286Fix available7.5 High
- openssl, debian linux, fedoraproject fedora +41 more +43 moreEDIPARTYNAME NULL pointer dereferenceCVE-2020-1971Public exploitFix available5.9 Medium
- haxx curl, apple mac os x, macos +22 more +24 moreA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...CVE-2020-8284Fix available3.7 Low
- ckeditor, oracle agile product lifecycle management, application express +6 more +8 moreImproper Neutralization of Input During Web Page Generation in CKEditor4CVE-2020-27193Fix available6.1 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2020-148472.7 Low
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2020-148326.1 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2020-148136.1 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2020-148065.3 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2020-148026.1 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2020-148016.1 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2020-147956.5 Medium
- Show moreLoading…