Skip to content
OpenAdvisories

Archive

20 October 2021

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2021-41163 EPSS 20%

    RCE via malicious SNS subscription payload

    Discourse is an open source platform for community discussion. In affected versions maliciously crafted requests could lead to remote code execution. This resulted from a lack of validation in subscribe_url values. This issue is patched in the latest stable, …

  • Critical 10.0

    Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported …

  • Critical 9.8

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container). Suppo…