Priority LOW 29
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: ttcserver).
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00368 · Published 2026-07-21 · No fix listed CWE-400
Priority LOW 20
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator).
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00369 · Published 2026-07-21 · No fix listed CWE-400
Priority LOW 25
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator).
CVSS 3.1MEDIUM 5.7· Local · High privileges · No interaction · EPSS 0.00155 · Published 2026-07-21 · No fix listed CWE-284
Priority LOW 20
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator).
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00303 · Published 2026-07-21 · No fix listed CWE-200
Priority LOW 24
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator).
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.00125 · Published 2026-07-21 · No fix listed CWE-284
Priority LOW 31
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator).
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00181 · Published 2026-07-21 · No fix listed CWE-269
Priority LOW 17
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator).
CVSS 3.1LOW 3.8· Local · Low privileges · No interaction · EPSS 0.00155 · Published 2026-07-21 · No fix listed CWE-200
Priority LOW 29
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00422 · Published 2026-07-21 · No fix listed CWE-400
Priority LOW 29
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00422 · Published 2026-07-21 · No fix listed CWE-400
Priority MEDIUM 43
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator).
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00432 · Published 2026-07-21 · No fix listed CWE-284
Priority LOW 28
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator).
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00154 · Published 2026-07-21 · No fix listed CWE-284
Priority LOW 39
Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename field.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03253 · Published 2021-11-08 · Partial fix CWE-20
Priority LOW 32
Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.03114 · Published 2021-08-08 · Partial fix CWE-362
Priority LOW 39
Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03744 · Published 2021-08-07 · Partial fix
Priority MEDIUM 41
Vulnerability in the Advanced Networking Option component of Oracle Database Server.
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.02432 · Published 2021-07-20 · No fix listed CWE-327
Priority LOW 39
The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to c…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.06975 · Published 2021-07-15 · Partial fix CWE-295
Priority LOW 30
When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.02642 · Published 2021-07-14 · Partial fix · 1.9.16, 1.10.11 CWE-130
Priority LOW 30
When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.02532 · Published 2021-07-14 · Partial fix · Apache Ant, 1.9.16 +1 CWE-130
Priority MEDIUM 49
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.07757 · Published 2020-10-01 · Partial fix · 1.10.9 CWE-379
Priority MEDIUM 45
This affects the package json before 10.0.0.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03112 · Published 2020-08-30 · Fixed in 10.0.0 CWE-78
Priority LOW 32
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information.
CVSS 3.1MEDIUM 6.3· Local · Low privileges · No interaction · EPSS 0.01769 · Published 2020-05-14 · Partial fix · 1.9.15, 1.10.8 CWE-668
Priority LOW 31
A vulnerability was found in Hibernate-Validator.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02157 · Published 2019-11-08 · Partial fix · 6.0.18.Final, 6.1.0.Final +1 CWE-79
Priority LOW 37
DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02418 · Published 2019-07-19 · No fix listed CWE-476
Priority LOW 39
An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.09712 · Published 2019-05-23 · Partial fix · 3.4.14, 3.5.5 CWE-862
Priority MEDIUM 47
cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02556 · Published 2019-05-09 · No fix listed CWE-125
Load more
THREATIST.IORead the docs