Priority LOW 13
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Naming Subsystem).
CVSS 3.1LOW 2.7· Network · High privileges · No interaction · EPSS 0.00286 · Published 2025-10-21 · No fix listed CWE-267
Priority LOW 13
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Block Storage).
CVSS 3.1LOW 2.7· Network · High privileges · No interaction · EPSS 0.00286 · Published 2025-10-21 · No fix listed CWE-267
Priority LOW 22
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Object Store).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00333 · Published 2025-10-21 · No fix listed CWE-400
Priority LOW 22
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Remote Replication).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00333 · Published 2025-10-21 · No fix listed CWE-400
Priority LOW 22
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Remote Replication).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00333 · Published 2025-10-21 · No fix listed CWE-400
Priority LOW 22
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00333 · Published 2025-10-21 · No fix listed CWE-400
Priority LOW 34
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Block Storage).
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0035 · Published 2025-10-21 · No fix listed CWE-284
Priority LOW 22
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Filesystems).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00308 · Published 2025-10-21 · No fix listed CWE-267
Priority LOW 23
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Analytics).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00411 · Published 2025-10-21 · No fix listed CWE-400
Priority LOW 22
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: User Interface).
CVSS 3.1MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.00384 · Published 2024-07-16 · No fix listed
Priority LOW 30
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core).
CVSS 3.1MEDIUM 6.5· Local · High privileges · User interaction · EPSS 0.0022 · Published 2024-04-16 · No fix listed
Priority LOW 20
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Object Store).
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00375 · Published 2024-02-17 · No fix listed CWE-200
Priority LOW 20
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core).
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00184 · Published 2024-01-16 · No fix listed CWE-400
Priority LOW 11
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core).
CVSS 3.1LOW 2.3· Local · High privileges · No interaction · EPSS 0.00188 · Published 2024-01-16 · No fix listed CWE-200
Priority LOW 16
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core).
CVSS 3.1LOW 3.4· Local · High privileges · No interaction · EPSS 0.00219 · Published 2022-07-19 · No fix listed
Priority LOW 37
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core).
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00278 · Published 2022-07-19 · No fix listed
Priority LOW 35
In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.03753 · Published 2022-05-03 · Partial fix CWE-190
Priority MEDIUM 42
Twisted is an event-based framework for internet applications, supporting Python 3.6+.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.028 · Published 2022-04-04 · Partial fix · 22.4.0 CWE-444
Priority HIGH 73
Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.50401 · Published 2022-03-14 · Partial fix CWE-190
Priority HIGH 67
If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.41861 · Published 2022-03-14 · Partial fix CWE-190
Priority HIGH 65
Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.28189 · Published 2022-03-14 · Partial fix CWE-444
Priority HIGH 70
A carefully crafted request body can cause a read to a random memory area which could cause the process to crash.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.69803 · Published 2022-03-14 · Partial fix CWE-665
Priority HIGH 72
Twisted is an event-based framework for internet applications, supporting Python 3.6+.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0351 · Published 2022-03-03 · Partial fix · 22.2.0 CWE-120
Priority MEDIUM 47
valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0512 · Published 2022-02-26 · Partial fix CWE-416
Priority LOW 25
There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00525 · Published 2022-02-21 · Fixed CWE-400
Load more
THREATIST.IORead the docs