VYPR

Banking Supply Chain Finance

by Oracle Corporation

CVEs (26)

  • CVE-2021-23337HigFeb 15, 2021
    risk 0.42cvss 7.2epss 0.21

    Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.

  • CVE-2020-8203HigJul 15, 2020
    risk 0.42cvss 7.4epss 0.05

    Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

  • CVE-2021-31812MedJun 12, 2021
    risk 0.36cvss 5.5epss 0.03

    In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

  • CVE-2021-31811MedJun 12, 2021
    risk 0.36cvss 5.5epss 0.03

    In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

  • CVE-2021-27906MedMar 19, 2021
    risk 0.29cvss 5.5epss 0.03

    A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

  • CVE-2020-28500MedFeb 15, 2021
    risk 0.28cvss 5.3epss 0.07

    Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.

Page 2 of 2