Priority LOW 24
Vulnerability in the Oracle Utilities Application Framework product of Oracle Utilities Applications (component: General).
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00219 · Published 2026-01-20 · No fix listed
Priority MEDIUM 47
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0486 · Published 2022-03-11 · Partial fix · 2.13.2.1, 2.12.6.1 CWE-787
Priority HIGH 72
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.99999 · Published 2021-12-18 · Partial fix · 2.17.0, 2.12.3 +5 CWE-20
Priority MEDIUM 51
XStream is a simple library to serialize objects to XML and back again.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.03437 · Published 2021-08-23 · Partial fix · 1.4.18 CWE-502
Priority MEDIUM 56
XStream is a simple library to serialize objects to XML and back again.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.11377 · Published 2021-08-23 · Partial fix · 1.4.18 CWE-502
Priority MEDIUM 44
XStream is a simple library to serialize objects to XML and back again.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.05918 · Published 2021-08-23 · Partial fix · 1.4.18 CWE-502
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.04735 · Published 2021-08-23 · Partial fix · 1.4.18 CWE-434
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.04735 · Published 2021-08-23 · Partial fix · 1.4.18 CWE-434
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.04735 · Published 2021-08-23 · Partial fix · 1.4.18 CWE-434
Priority MEDIUM 60
XStream is a simple library to serialize objects to XML and back again.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.143 · Published 2021-08-23 · Partial fix · 1.4.18 CWE-434
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.04065 · Published 2021-08-23 · Partial fix · 1.4.18 CWE-434
Priority MEDIUM 61
XStream is a simple library to serialize objects to XML and back again.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.16118 · Published 2021-08-23 · Partial fix · 1.4.18 CWE-434
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.04457 · Published 2021-08-23 · Partial fix · 1.4.18 CWE-434
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.04735 · Published 2021-08-23 · Partial fix · 1.4.18 CWE-434
Priority MEDIUM 53
XStream is a simple library to serialize objects to XML and back again.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0454 · Published 2021-08-23 · Partial fix · 1.4.18 CWE-434
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.04735 · Published 2021-08-23 · Partial fix · 1.4.18 CWE-434
Priority CRITICAL 96KEV
XStream is a simple library to serialize objects to XML and back again.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.98124 · Published 2021-08-23 · Partial fix · 1.4.18 CWE-502
Priority MEDIUM 41
Vulnerability in the Advanced Networking Option component of Oracle Database Server.
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.02432 · Published 2021-07-20 · No fix listed CWE-327
Priority LOW 30
When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.02642 · Published 2021-07-14 · Partial fix · 1.9.16, 1.10.11 CWE-130
Priority LOW 30
When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.02532 · Published 2021-07-14 · Partial fix · Apache Ant, 1.9.16 +1 CWE-130
Priority LOW 37
A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02281 · Published 2021-06-01 · Partial fix · 1.3.3, 2.4.4 CWE-787
Priority LOW 38
An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02886 · Published 2021-02-23 · Partial fix · 1.3.2, 2.4.1 +1 CWE-754
Priority CRITICAL 88
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.74924 · Published 2021-01-20 · No fix listed
Priority MEDIUM 45
An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.07225 · Published 2020-12-18 · Partial fix · 1.67 CWE-670
Priority MEDIUM 56
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.17714 · Published 2020-12-03 · Partial fix · 2.6.7.4, 2.9.10.7 +1 CWE-611
Load more
THREATIST.IORead the docs