CVE search

401 051 vulnerabilities · 1 766 actively exploited (CISA KEV)

40 results

ID	Severity	Summary	Published
CVE-2021-2351	ÉLEVÉE8.3	Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks req	21/07/2021
CVE-2021-23017	ÉLEVÉE7.7	A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.	01/06/2021
CVE-2021-29425	MOYENNE4.8	In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code