VYPR

CVEs

101,972 total · page 1256 of 2,040

AllCriticalHighKEV
  • CVE-2021-35585HigOct 20, 2021
    Oracle Corporation
    Incentive Compensation
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2021-35583HigOct 20, 2021
    Oracle Corporation
    Mysql Server
    risk 0.49cvss 7.5epss 0.03

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Windows). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL…

  • CVE-2021-35574HigOct 20, 2021
    Oracle Corporation
    Outside In Technology
    risk 0.49cvss 7.5epss 0.02

    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2021-35573HigOct 20, 2021
    Oracle Corporation
    Outside In Technology
    risk 0.49cvss 7.5epss 0.01

    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2021-35572HigOct 20, 2021
    Oracle Corporation
    Fusion Middleware
    risk 0.49cvss 7.5epss 0.01

    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2021-35570HigOct 20, 2021
    Oracle Corporation
    Oracle Mobile Field Service
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2021-35566HigOct 20, 2021
    Oracle Corporation
    Applications Manager
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2021-35563HigOct 20, 2021
    Oracle Corporation
    Shipping Execution
    risk 0.53cvss 8.1epss 0.02

    Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.6-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2021-35562HigOct 20, 2021
    Oracle Corporation
    Universal Work Queue
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker…

  • CVE-2021-35560HigOct 20, 2021
    Oracle Corporation
    Java SE
    risk 0.49cvss 7.5epss 0.04

    Vulnerability in the Java SE product of Oracle Java SE (component: Deployment). The supported version that is affected is Java SE: 8u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…

  • CVE-2021-35543HigOct 20, 2021
    Oracle Corporation
    PeopleSoft Enterprise CC Common Application Objects
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Activity Guide Composer). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…

  • CVE-2021-35538HigOct 20, 2021
    Oracle Corporation
    VM Virtualbox
    risk 0.51cvss 7.8epss 0.00

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.28. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…

  • CVE-2021-35536HigOct 20, 2021
    Oracle Corporation
    Deal Management
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Deal Management product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…

  • CVE-2021-2485HigOct 20, 2021
    Oracle Corporation
    Trade Management
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade…

  • CVE-2021-2484HigOct 20, 2021
    Oracle Corporation
    Operations Intelligence
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite (component: BIS Operations Intelligence). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…

  • CVE-2021-2483HigOct 20, 2021
    Oracle Corporation
    Content Manager
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Content Item Manager). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2021-2482HigOct 20, 2021
    Oracle Corporation
    Payables
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Invoice Approvals). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…

  • CVE-2021-2474HigOct 20, 2021
    Oracle Corporation
    Web Analytics
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Web Analytics product of Oracle E-Business Suite (component: Admin). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Web…

  • CVE-2021-2461HigOct 20, 2021
    Oracle Corporation
    Communications Interactive Session Recorder
    risk 0.54cvss 8.3epss 0.01

    Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications (component: Provision API). The supported version that is affected is 6.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2021-2137HigOct 20, 2021
    Oracle Corporation
    Enterprise Manager Base Platform
    risk 0.57cvss 8.8epss 0.01

    Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework). Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…

  • CVE-2021-30316HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

  • CVE-2021-30315HigOct 20, 2021
    Qualcomm
    Snapdragon Auto
    risk 0.55cvss 8.4epss 0.00

    Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon Auto

  • CVE-2021-30312HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…

  • CVE-2021-30310HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,…

  • CVE-2021-30306HigOct 20, 2021
    Qualcomm
    Snapdragon Mobile
    risk 0.55cvss 8.4epss 0.00

    Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

  • CVE-2021-30305HigOct 20, 2021
    Qualcomm
    Snapdragon Mobile
    risk 0.55cvss 8.4epss 0.00

    Possible out of bound access due to lack of validation of page offset before page is inserted in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

  • CVE-2021-30304HigOct 20, 2021
    Qualcomm
    Snapdragon Compute
    risk 0.49cvss 7.5epss 0.01

    Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity

  • CVE-2021-30302HigOct 20, 2021
    Qualcomm
    Snapdragon Compute
    risk 0.49cvss 7.5epss 0.01

    Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…

  • CVE-2021-30297HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible out of bound read due to improper validation of packet length while handling data transfer in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-30292HigOct 20, 2021
    Qualcomm
    Snapdragon Compute
    risk 0.55cvss 8.4epss 0.00

    Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-30291HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-30288HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

  • CVE-2021-30258HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-30257HigOct 20, 2021
    Qualcomm
    Snapdragon Compute
    risk 0.55cvss 8.4epss 0.00

    Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT

  • CVE-2021-30256HigOct 20, 2021
    Qualcomm
    Snapdragon Compute
    risk 0.55cvss 8.4epss 0.00

    Possible stack overflow due to improper validation of camera name length before copying the name in VR Service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT

  • CVE-2021-1985HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-1984HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-1983HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible buffer overflow due to improper handling of negative data length while processing write request in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-1980HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

  • CVE-2021-1977HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon…

  • CVE-2021-1959HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

  • CVE-2021-1949HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

  • CVE-2021-1936HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-1932HigOct 20, 2021
    Qualcomm
    Snapdragon Compute
    risk 0.55cvss 8.4epss 0.00

    Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…

  • CVE-2021-1917HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-1913HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

  • CVE-2020-11303HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.56cvss 8.6epss 0.01

    Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…

  • CVE-2021-41150HigOct 19, 2021
    Awslabs
    Tough
    risk 0.46cvss 8.2epss 0.01

    Tough provides a set of Rust libraries and tools for using and generating the update framework (TUF) repositories. The tough library, prior to 0.12.0, does not properly sanitize delegated role names when caching a repository, or when loading a repository from the filesystem.…

  • CVE-2021-31385HigOct 19, 2021
    Juniper Networks
    Junos
    risk 0.57cvss 8.8epss 0.01

    An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in J-Web of Juniper Networks Junos OS allows any low-privileged authenticated attacker to elevate their privileges to root. This issue affects: Juniper Networks Junos OS 12.3 versions…

  • CVE-2021-31384HigOct 19, 2021
    Juniper Networks
    Junos OS on SRX Series
    risk 0.47cvss 7.2epss 0.01

    Due to a Missing Authorization weakness and Insufficient Granularity of Access Control in a specific device configuration, a vulnerability exists in Juniper Networks Junos OS on SRX Series whereby an attacker who attempts to access J-Web administrative interfaces can…