CVE-2022-21518
- EPSS 0.57%
- Published 19.07.2022 22:15:10
- Last modified 21.11.2024 06:44:52
Vulnerability in the Oracle Health Sciences Data Management Workbench product of Oracle Health Sciences Applications (component: User Interface). Supported versions that are affected are 2.4.8.7 and 2.5.2.1. Easily exploitable vulnerability allows lo...
CVE-2021-44832
- EPSS 53.59%
- Published 28.12.2021 20:15:08
- Last modified 21.11.2024 06:31:34
Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has ...
CVE-2021-29425
- EPSS 0.48%
- Published 13.04.2021 07:15:12
- Last modified 21.11.2024 06:01:04
In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but ...
CVE-2021-23337
- EPSS 0.86%
- Published 15.02.2021 13:15:12
- Last modified 21.11.2024 05:51:31
Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.
CVE-2020-28500
- EPSS 0.2%
- Published 15.02.2021 11:15:12
- Last modified 21.11.2024 05:22:55
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.
CVE-2019-2904
- EPSS 21.04%
- Published 16.10.2019 18:15:27
- Last modified 21.11.2024 04:41:46
Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacke...
CVE-2019-2629
- EPSS 0.31%
- Published 23.04.2019 19:32:52
- Last modified 21.11.2024 04:41:15
Vulnerability in the Oracle Health Sciences Data Management Workbench component of Oracle Health Sciences Applications (subcomponent: User Interface). The supported version that is affected is 2.4.8. Easily exploitable vulnerability allows low privil...