Read the docs

Oracle

Records14201All Threatist records
Exploited (KEV)82In CISA KEV
CVSS critical1606CVSS 9.0–10.0
CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV
TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Priority CRITICAL 100KEV 2026-08-24TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability Priority CRITICAL 100KEV 2026-07-15TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Priority CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records
Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

12 records in Zfs Storage Appliance · all components

TI-2021-06034 CVE-2021-23336 · GHSA-4qjw-vx62-3vqx

Web Cache Poisoning

Priority MEDIUM 54

The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.pars…

CVSS 3.1MEDIUM 5.9 Network No auth User interaction EPSS 0.40736 Published 2021-02-15 Partial fix · 3.6.13, 3.7.10 +2 CWE-444
TI-2021-05177 CVE-2021-22191 · GHSA-w6w5-wrcg-5jrx

Injection in Wireshark

Priority MEDIUM 44

Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03655 Published 2021-03-15 Fixed in 3.4.4, 3.2.12 CWE-74
TI-2021-05160 CVE-2021-22174 · GHSA-m8vf-6qcv-248x

Resource allocation without limits in Wireshark

Priority LOW 38

Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02747 Published 2021-02-17 Fixed in 3.4.3 CWE-770
TI-2021-09321 CVE-2021-28041 · GHSA-gp5m-rxrx-pfrj

ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few…

Priority LOW 37

ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-…

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.03513 Published 2021-03-05 No fix listed CWE-415
TI-2021-05159 CVE-2021-22173 · GHSA-mxrc-pw88-9mfj

Memory leak in Wireshark

Priority LOW 37

Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02411 Published 2021-02-17 Fixed in 3.4.3 CWE-401
TI-2018-01081 CVE-2018-1165 · GHSA-26qq-h2w9-r3wv

Heap-based buffer overflow in Joyent SmartOS

Priority LOW 31

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00499 Published 2018-02-21 No fix listed CWE-122
Open these records in search →