Archive
20 October 2021
Vulnerabilities first published on this day (UTC), newest first.
65 results · Clear filters · Feed
-
High 7.8
Directory Traversal in Babel
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.
-
High 7.5
Unlimited requests in modern-async
modern-async is an open source JavaScript tooling library for asynchronous operations using async/await and promises. In affected versions a bug affecting two of the functions in this library: forEachSeries and forEachLimit. They should limit the concurrency …
-
High 8.6
Prototype Pollution
This affects all versions of package x-assign. The global proto object can be polluted using the __proto__ object.
-
High 8.8
Camaleon CMS - Insufficient Session Expiration after Password Change
Camaleon CMS 0.1.7 to 2.6.0 doesn’t terminate the active session of the users, even after the admin changes the user’s password. A user that was already logged in, will still have access to the application even after the password was changed.
-
High 7.5
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). …
-
High 7.5
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). …
-
High 7.5
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). …
-
High 7.5
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). …
-
High 7.5
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). …
-
High 7.5
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). …
-
High 7.5
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). …
-
High 7.5
Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported …
-
High 7.7
Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported …
-
High 8.5
Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported …
-
High 7.5
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…
-
High 7.1
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12…
-
High 7.1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
High 8.2
Vulnerability in the Zero Downtime DB Migration to Cloud component of Oracle Database Server. The supported version tha…
-
High 8.1
Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite (component: User Interface). Supp…
-
High 7.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Windows). Supported versions that are aff…
-
High 7.5
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). …
-
High 7.5
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). …
-
High 7.5
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). …
-
High 8.1
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported ve…
-
High 8.1
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported…
-
High 8.1
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Support…
-
High 8.1
Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Leve…
-
High 7.5
Vulnerability in the Java SE product of Oracle Java SE (component: Deployment). The supported version that is affected …
-
High 8.1
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Activ…
-
High 7.8
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
High 8.1
Vulnerability in the Oracle Deal Management product of Oracle E-Business Suite (component: Miscellaneous). Supported ve…
-
High 8.1
Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions…
-
High 8.1
Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite (component: BIS Operations Intel…
-
High 8.1
Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Content Item Manager). Suppo…
-
High 8.1
Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Invoice Approvals). Supported versi…
-
High 8.1
Vulnerability in the Oracle Web Analytics product of Oracle E-Business Suite (component: Admin). Supported versions tha…
-
High 8.3
Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications (component: Pr…
-
High 8.8
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework…
-
High 8.4
Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapd…
-
High 8.4
Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon Auto