Vendor CVEs

Oracle Corporation

All CVEs

13,472 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-2390	NetApp Oncommand Insight	Med	0.39	5.9	0.04	Jul 21, 2021	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to…
CVE-2021-2389	Fedoraproject Fedora	Med	0.39	5.9	0.08	Jul 21, 2021	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to…
CVE-2021-2356	Fedoraproject Fedora	Med	0.39	5.9	0.02	Jul 21, 2021	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple…
CVE-2021-30641	Apache HTTP Server	Med	0.39	5.3	0.53	Jun 10, 2021	Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF'
CVE-2019-17567	Apache HTTP Server	Med	0.39	5.3	0.60	Jun 10, 2021	Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to pass through with no HTTP…
CVE-2020-14340	Xnio Xnio	Med	0.39	5.9	0.02	Jun 2, 2021	A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.
CVE-2021-2321	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.01	Apr 28, 2021	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2306	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Apr 22, 2021	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2266	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Apr 22, 2021	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2211	Oracle Corporation Weblogic Server	Med	0.39	5.9	0.02	Apr 22, 2021	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2021-2161	McAfee Epolicy Orchestrator	Med	0.39	5.9	0.03	Apr 22, 2021	Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5,…
CVE-2021-25329	Apache Tomcat	Hig	0.39	7.0	0.09	Mar 1, 2021	The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note…
CVE-2020-13947	Apache Activemq	Med	0.39	6.1	0.79	Feb 8, 2021	An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0.
CVE-2021-2131	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.01	Jan 20, 2021	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2126	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Jan 20, 2021	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2124	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Jan 20, 2021	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2121	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Jan 20, 2021	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2120	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Jan 20, 2021	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2119	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.01	Jan 20, 2021	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2112	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Jan 20, 2021	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2111	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Jan 20, 2021	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2086	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Jan 20, 2021	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2011	Fedoraproject Fedora	Med	0.39	5.9	0.03	Jan 20, 2021	Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to…
CVE-2020-1971	OpenSSL Project OpenSSL	Med	0.39	5.9	0.07	Dec 8, 2020	The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This…
CVE-2020-14889	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Oct 21, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2020-14886	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.01	Oct 21, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2020-14885	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.01	Oct 21, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2020-14884	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.01	Oct 21, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2020-14881	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.01	Oct 21, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2020-16135	Libssh Libssh	Med	0.39	5.9	0.04	Jul 29, 2020	libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.
CVE-2020-14704	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.01	Jul 15, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2020-14703	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.01	Jul 15, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2020-14629	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.01	Jul 15, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2020-13630	SQLite SQLite	Hig	0.39	7.0	0.01	May 27, 2020	ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
CVE-2020-10726	DPDK Dpdk	Med	0.39	6.0	0.00	May 20, 2020	A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of…
CVE-2020-2946	Oracle Corporation Application Performance Management	Med	0.39	6.0	0.01	Apr 15, 2020	Vulnerability in the Application Performance Management product of Oracle Enterprise Manager (component: EM Request Monitoring). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with…
CVE-2020-2894	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.01	Apr 15, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2020-2804	Fedoraproject Fedora	Med	0.39	5.9	0.03	Apr 15, 2020	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2020-2743	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.01	Apr 15, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2020-2741	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.01	Apr 15, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2020-1934	Apache HTTP Server	Med	0.39	5.3	0.52	Apr 1, 2020	In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.
CVE-2019-16792	Agendaless Waitress	Hig	0.39	7.1	0.02	Jan 22, 2020	Waitress through version 1.3.1 allows request smuggling by sending the Content-Length header twice. Waitress would header fold a double Content-Length header and due to being unable to cast the now comma separated value to an integer would set the Content-Length to 0 internally.…
CVE-2020-2727	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Jan 15, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2020-2680	Oracle Corporation Solaris	Med	0.39	6.0	0.00	Jan 15, 2020	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise…
CVE-2020-2645	Oracle Corporation Enterprise Manager Base Platform	Med	0.39	6.0	0.01	Jan 15, 2020	Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network…
CVE-2020-2644	Oracle Corporation Enterprise Manager Base Platform	Med	0.39	6.0	0.01	Jan 15, 2020	Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with…
CVE-2020-2643	Oracle Corporation Enterprise Manager Base Platform	Med	0.39	6.0	0.01	Jan 15, 2020	Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Job System). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via…
CVE-2020-2642	Oracle Corporation Enterprise Manager Base Platform	Med	0.39	6.0	0.01	Jan 15, 2020	Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network…
CVE-2020-2641	Oracle Corporation Enterprise Manager	Med	0.39	6.0	0.01	Jan 15, 2020	Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Discovery Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with…
CVE-2020-2640	Oracle Corporation Enterprise Manager	Med	0.39	6.0	0.01	Jan 15, 2020	Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Target Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with…

CVE-2021-2390MedJul 21, 2021
NetApp
Oncommand Insight
risk 0.39cvss 5.9epss 0.04
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to…
CVE-2021-2389MedJul 21, 2021
Fedoraproject
Fedora
risk 0.39cvss 5.9epss 0.08
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to…
CVE-2021-2356MedJul 21, 2021
Fedoraproject
Fedora
risk 0.39cvss 5.9epss 0.02
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple…
CVE-2021-30641MedJun 10, 2021
Apache
HTTP Server
risk 0.39cvss 5.3epss 0.53
Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF'
CVE-2019-17567MedJun 10, 2021
Apache
HTTP Server
risk 0.39cvss 5.3epss 0.60
Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to pass through with no HTTP…
CVE-2020-14340MedJun 2, 2021
Xnio
Xnio
risk 0.39cvss 5.9epss 0.02
A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.
CVE-2021-2321MedApr 28, 2021
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2306MedApr 22, 2021
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2266MedApr 22, 2021
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2211MedApr 22, 2021
Oracle Corporation
Weblogic Server
risk 0.39cvss 5.9epss 0.02
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2021-2161MedApr 22, 2021
McAfee
Epolicy Orchestrator
risk 0.39cvss 5.9epss 0.03
Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5,…
CVE-2021-25329HigMar 1, 2021
Apache
Tomcat
risk 0.39cvss 7.0epss 0.09
The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note…
CVE-2020-13947MedFeb 8, 2021
Apache
Activemq
risk 0.39cvss 6.1epss 0.79
An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0.
CVE-2021-2131MedJan 20, 2021
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2126MedJan 20, 2021
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2124MedJan 20, 2021
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2121MedJan 20, 2021
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2120MedJan 20, 2021
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2119MedJan 20, 2021
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2112MedJan 20, 2021
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2111MedJan 20, 2021
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2086MedJan 20, 2021
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2011MedJan 20, 2021
Fedoraproject
Fedora
risk 0.39cvss 5.9epss 0.03
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to…
CVE-2020-1971MedDec 8, 2020
OpenSSL Project
OpenSSL
risk 0.39cvss 5.9epss 0.07
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This…
CVE-2020-14889MedOct 21, 2020
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2020-14886MedOct 21, 2020
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2020-14885MedOct 21, 2020
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2020-14884MedOct 21, 2020
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2020-14881MedOct 21, 2020
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2020-16135MedJul 29, 2020
Libssh
Libssh
risk 0.39cvss 5.9epss 0.04
libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.
CVE-2020-14704MedJul 15, 2020
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2020-14703MedJul 15, 2020
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2020-14629MedJul 15, 2020
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2020-13630HigMay 27, 2020
SQLite
SQLite
risk 0.39cvss 7.0epss 0.01
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
CVE-2020-10726MedMay 20, 2020
DPDK
Dpdk
risk 0.39cvss 6.0epss 0.00
A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of…
CVE-2020-2946MedApr 15, 2020
Oracle Corporation
Application Performance Management
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Application Performance Management product of Oracle Enterprise Manager (component: EM Request Monitoring). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with…
CVE-2020-2894MedApr 15, 2020
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2020-2804MedApr 15, 2020
Fedoraproject
Fedora
risk 0.39cvss 5.9epss 0.03
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2020-2743MedApr 15, 2020
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2020-2741MedApr 15, 2020
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2020-1934MedApr 1, 2020
Apache
HTTP Server
risk 0.39cvss 5.3epss 0.52
In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.
CVE-2019-16792HigJan 22, 2020
Agendaless
Waitress
risk 0.39cvss 7.1epss 0.02
Waitress through version 1.3.1 allows request smuggling by sending the Content-Length header twice. Waitress would header fold a double Content-Length header and due to being unable to cast the now comma separated value to an integer would set the Content-Length to 0 internally.…
CVE-2020-2727MedJan 15, 2020
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2020-2680MedJan 15, 2020
Oracle Corporation
Solaris
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise…
CVE-2020-2645MedJan 15, 2020
Oracle Corporation
Enterprise Manager Base Platform
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network…
CVE-2020-2644MedJan 15, 2020
Oracle Corporation
Enterprise Manager Base Platform
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with…
CVE-2020-2643MedJan 15, 2020
Oracle Corporation
Enterprise Manager Base Platform
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Job System). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via…
CVE-2020-2642MedJan 15, 2020
Oracle Corporation
Enterprise Manager Base Platform
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network…
CVE-2020-2641MedJan 15, 2020
Oracle Corporation
Enterprise Manager
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Discovery Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with…
CVE-2020-2640MedJan 15, 2020
Oracle Corporation
Enterprise Manager
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Target Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with…

Page 116 of 270