Skip to contentOracle Retail Xstore Point Of Service vulnerabilities
- oracle retail xstore point of serviceVulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications ...CVE-2026-219544.3 Medium
- oracle retail xstore point of serviceVulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications ...CVE-2026-219533.3 Low
- vmware spring cloud function, vmware tanzu spring cloud, oracle banking branch +26 more +28 moreSpring Cloud Function Code Injection with a specially crafted SpEL as a routing expressionCVE-2022-22963In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- vmware spring framework, cisco cx cloud agent, oracle commerce platform +35 more +37 moreRemote Code Execution in Spring FrameworkCVE-2022-22965In KEVPublic exploitFix availableEPSS 99.6%9.8 Critical
- x-stream xstream, debian linux, fedoraproject fedora +8 more +10 moreDenial of Service by injecting highly recursive collections or maps in XStreamCVE-2021-43859Fix available7.5 High
- apache log4j, apache software foundation log4j2, cisco cloudcenter +20 more +22 moreApache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configurationCVE-2021-44832Public exploitFix availableEPSS 97.9%6.6 Medium
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreA Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshalingCVE-2021-39150Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreA Server-Side Forgery Request vulnerability in XStream via HashMap unmarshalingCVE-2021-39152Fix availableEPSS 11.4%8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream can cause a Denial of ServiceCVE-2021-39140Fix available6.5 Medium
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39149Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39148Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39147Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39146Fix availableEPSS 14.3%8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39145Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39141Public exploitFix availableEPSS 16.1%8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39151Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39139Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39154Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to a Remote Command Execution attackCVE-2021-39144In KEVPublic exploitFix availableEPSS 98.1%8.5 High
- oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 moreVulnerability in the Advanced Networking Option component of Oracle Database Server. Supported...CVE-2021-23518.3 High
- apache ant, oracle agile engineering data management, agile product lifecycle management +33 more +35 moreApache Ant ZIP, and ZIP based, archive denial of service vulerabilityCVE-2021-36374Fix available5.5 Medium
- apache ant, oracle agile product lifecycle management, banking trade finance +29 more +31 moreApache Ant TAR archive denial of service vulnerabilityCVE-2021-36373Fix available5.5 Medium
- x-stream xstream, debian linux, fedoraproject fedora +14 more +16 moreXStream is vulnerable to a Remote Command Execution attackCVE-2021-29505Public exploitFix availableEPSS 77.2%7.5 High
- apache commons io, debian linux, netapp active iq unified manager +57 more +59 morePossible limited path traversal vulnerabily in Apache Commons IOCVE-2021-29425Public exploitFix availableEPSS 10.5%4.8 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21351Fix availableEPSS 82.1%5.4 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21350Fix availableEPSS 15.2%5.3 Medium
- x-stream xstream, apache activemq, jmeter +14 more +16 moreA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-21349Public exploitFix availableEPSS 46.8%6.1 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)CVE-2021-21348Fix availableEPSS 13.8%5.3 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21347Fix availableEPSS 14.3%6.1 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21346Fix availableEPSS 76.4%6.1 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to a Remote Command Execution attackCVE-2021-21345Public exploitFix availableEPSS 72.3%5.8 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21344Fix availableEPSS 76.0%5.3 Medium
- x-stream xstream, apache activemq, jmeter +12 more +14 moreXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rightsCVE-2021-21343Fix availableEPSS 46.7%5.3 Medium
- x-stream xstream, apache activemq, jmeter +12 more +14 moreA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-21342Fix availableEPSS 50.0%5.3 Medium
- x-stream xstream, apache activemq, jmeter +10 more +12 moreXStream can cause a Denial of ServiceCVE-2021-21341Public exploitFix availableEPSS 77.8%7.5 High
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +16 more +18 moreA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the fileCVE-2021-27906Fix available5.5 Medium
- apache pdfbox, fedoraproject fedora, oracle banking trade finance process management +12 more +14 moreA carefully crafted PDF file can trigger an infinite loop while loading the fileCVE-2021-27807Fix available5.5 Medium
- fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 moreUnsafe Deserialization in jackson-databindCVE-2020-36179Public exploitFix availableEPSS 17.1%8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36180Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36182Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36183Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36184Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36185Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36186Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36187Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36188Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +37 more +39 moreUnsafe Deserialization in jackson-databindCVE-2020-36189Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 moreUnsafe Deserialization in jackson-databindCVE-2020-36181Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +37 more +39 moreSerialization gadget exploit in jackson-databindCVE-2020-35728Public exploitFix availableEPSS 12.5%8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +22 more +24 moreSerialization gadgets exploit in jackson-databindCVE-2020-35490Fix available8.1 High
- Show moreLoading…