Priority HIGH 72
Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02192 · Published 2025-02-10 · Partial fix · 4.1.118.Final CWE-20
Priority LOW 24
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00986 · Published 2025-01-21 · Partial fix CWE-863
Priority LOW 24
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.0099 · Published 2025-01-21 · Will not fix CWE-770
Priority LOW 36
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00575 · Published 2024-10-15 · No fix listed CWE-863
Priority LOW 21
In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) c…
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00568 · Published 2024-08-20 · Partial fix · 5.3.39, 6.0+ CWE-770
Priority LOW 37
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.01127 · Published 2024-07-16 · Partial fix CWE-200
Priority LOW 24
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00856 · Published 2024-07-16 · Partial fix CWE-284
Priority LOW 30
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.0094 · Published 2024-07-16 · Partial fix CWE-200
Priority LOW 20
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01257 · Published 2024-07-16 · Partial fix
Priority LOW 20
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.0104 · Published 2024-07-16 · Partial fix
Priority MEDIUM 44
IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 is vulnerable to injection attacks in application logging by not sanitizing user provided data.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00643 · Published 2024-05-02 · No fix listed CWE-117
Priority LOW 25
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.01116 · Published 2024-04-16 · Will not fix
Priority LOW 12
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).
CVSS 3.1LOW 2.2· Network · High privileges · No interaction · EPSS 0.00401 · Published 2024-04-16 · No fix listed CWE-269
Priority LOW 23
Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump).
CVSS 3.1MEDIUM 4.9· Local · No auth · No interaction · EPSS 0.00424 · Published 2024-04-16 · Partial fix
Priority LOW 19
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.00752 · Published 2024-04-16 · Partial fix CWE-349
Priority LOW 24
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00893 · Published 2024-04-16 · Will not fix
Priority LOW 20
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01286 · Published 2024-04-16 · Partial fix
Priority LOW 24
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00841 · Published 2024-04-16 · Will not fix
Priority LOW 20
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.013 · Published 2024-04-16 · Partial fix
Priority LOW 24
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00841 · Published 2024-04-16 · Will not fix CWE-400
Priority LOW 24
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00887 · Published 2024-04-16 · Fixed
Priority LOW 24
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00872 · Published 2024-04-16 · Will not fix CWE-770
Priority LOW 24
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00894 · Published 2024-04-16 · Fixed
Priority LOW 24
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00887 · Published 2024-04-16 · Fixed CWE-400
Priority LOW 24
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.0097 · Published 2024-04-16 · Will not fix CWE-121
Load more
THREATIST.IORead the docs