Home/Product/netapp e series santricity os controller
Product

netapp e series santricity os controller

242 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2024-6387
>= 11.0.0 and <= 11.70.2
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to
8.1HIGH
CVE-2024-26735
>= 11.0.0 and <= 11.70.2
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The
5.5MEDIUM
CVE-2024-26733
>= 11.0.0 and <= 11.70.2
In the Linux kernel, the following vulnerability has been resolved: arp: Prevent overflow in arp_req_get(). syzkaller reported a
5.5MEDIUM
CVE-2023-26049
>= 11.0
Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies
2.4LOW
CVE-2022-39399
>= 11.0 and <= 11.70.2
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supporte
3.7LOW
CVE-2022-21628
>= 11.0 and <= 11.70.2
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Serv
5.3MEDIUM
CVE-2022-21626
>= 11.0 and <= 11.70.2
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported
5.3MEDIUM
CVE-2022-21624
>= 11.0 and <= 11.70.2
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported vers
3.7LOW
CVE-2022-21619
>= 11.0 and < 11.70.2
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported
3.7LOW
CVE-2022-21618
>= 11.0 and <= 11.70.2
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported vers
5.3MEDIUM
CVE-2022-36879
>= 11.0 and <= 11.50.2
An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount t
5.5MEDIUM
CVE-2022-23237
>= 11.0.0 and <= 11.70.2
E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that coul
6.1MEDIUM
CVE-2022-23236
>= 11.40 and <= 11.70.2
E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file
4.4MEDIUM
CVE-2022-1678
>= 11.0 and <= 11.70.2
An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memo
5.9MEDIUM
CVE-2022-21496
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported vers
5.3MEDIUM
CVE-2022-21476
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported
7.5HIGH
CVE-2022-21449
all versions
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported
7.5HIGH
CVE-2022-21443
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported
3.7LOW
CVE-2022-21434
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported
5.3MEDIUM
CVE-2022-21426
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported vers
5.3MEDIUM
CVE-2021-4203
>= 11.0.0 and <= 11.70.2
A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen
6.8MEDIUM
CVE-2018-25032
>= 11.0.0 and <= 11.70.2
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
7.5HIGH
CVE-2021-3772
all versions
A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks
6.5MEDIUM
CVE-2020-36516
>= 11.0
An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment
5.9MEDIUM
CVE-2021-20322
>= 11.0 and <= 11.70.1
A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was fo
7.4HIGH
CVE-2022-21366
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported v
5.3MEDIUM
CVE-2022-21365
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported v
5.3MEDIUM
CVE-2022-21360
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported v
5.3MEDIUM
CVE-2022-21349
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versio
5.3MEDIUM
CVE-2022-21341
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Suppo
5.3MEDIUM
CVE-2022-21340
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported
5.3MEDIUM
CVE-2022-21305
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported v
5.3MEDIUM
CVE-2022-21299
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported vers
5.3MEDIUM
CVE-2022-21296
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported vers
5.3MEDIUM
CVE-2022-21294
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported
5.3MEDIUM
CVE-2022-21293
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported
5.3MEDIUM
CVE-2022-21291
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported v
5.3MEDIUM
CVE-2022-21283
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported
5.3MEDIUM
CVE-2022-21282
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported vers
5.3MEDIUM
CVE-2022-21277
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported v
5.3MEDIUM
CVE-2022-21271
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported
5.3MEDIUM
CVE-2022-21248
>= 11.0.0 and <= 11.70.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Suppo
3.7LOW
CVE-2021-45485
all versions
In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain us
7.5HIGH
CVE-2021-43527
>= 11.0 and <= 11.70.1
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded D
9.8CRITICAL
CVE-2021-35603
>= 11.0.0 and <= 11.70.1
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions th
3.7LOW
CVE-2021-35588
>= 11.0.0 and <= 11.70.1
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions
3.1LOW
CVE-2021-35586
>= 11.0.0 and <= 11.70.1
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions
5.3MEDIUM
CVE-2021-35578
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions th
5.3MEDIUM
CVE-2021-35567
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versio
6.8MEDIUM
CVE-2021-35565
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions th
5.3MEDIUM
CVE-2021-35564
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). Supported versions
5.3MEDIUM
CVE-2021-35561
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions
5.3MEDIUM
CVE-2021-35560
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE product of Oracle Java SE (component: Deployment). The supported version that is affected is Java SE:
7.5HIGH
CVE-2021-35559
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions t
5.3MEDIUM
CVE-2021-35556
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions t
5.3MEDIUM
CVE-2021-35550
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions th
5.9MEDIUM
CVE-2021-3712
>= 11.0 and <= 11.50.2
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string dat
7.4HIGH
CVE-2021-3711
>= 11.0 and <= 11.50.2
In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an applic
9.8CRITICAL
CVE-2021-35942
>= 11.0 and <= 11.70.1
The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wor
9.1CRITICAL
CVE-2021-34429
>= 11.0 and <= 11.70.1
For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to acce
5.3MEDIUM
CVE-2021-34428
>= 11.0 and <= 11.70.1
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed()
2.9LOW
CVE-2021-26996
>= 11.0.0 and < 11.70.1
E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successful
7.5HIGH
CVE-2021-26995
>= 11.0.0 and < 11.70.1
E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successful
8.8HIGH
CVE-2021-26993
>= 11.0.0 and < 11.70.1
E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successful
5.3MEDIUM
CVE-2021-26997
>= 11.0.0 and < 11.70.1
E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successful
6.5MEDIUM
CVE-2021-3522
>= 11.0.0 and <= 11.70.1
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
5.5MEDIUM
CVE-2021-33574
>= 11.0 and <= 11.70.1
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification t
9.8CRITICAL
CVE-2021-3517
>= 11.0.0 and <= 11.70.1
There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a
8.6HIGH
CVE-2021-28165
>= 11.0.0 and < 11.70.1
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a
7.5HIGH
CVE-2021-28164
>= 11.0 and <= 11.70.1
In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %
5.3MEDIUM
CVE-2021-28163
>= 11.0.0 and <= 11.70.1
In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is
2.7LOW
CVE-2020-27223
>= 11.0.0 and <= 11.70.1
In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multi
5.2MEDIUM
CVE-2021-21285
>= 11.0 and <= 11.60.3
In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manif
6.5MEDIUM
CVE-2021-21284
>= 11.0.0 and <= 11.60.3
In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access to remappe
6.8MEDIUM
CVE-2021-3326
>= 11.0 and <= 11.60.3
The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-
7.5HIGH
CVE-2020-1971
>= 11.0.0 and <= 11.60.3
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPar
5.9MEDIUM
CVE-2020-29562
>= 11.0.0 and <= 11.60.3
The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible ch
4.8MEDIUM
CVE-2020-8577
>= 11.50.1
SANtricity OS Controller Software versions 11.50.1 and higher are susceptible to a vulnerability which could allow an attacker to
5.9MEDIUM
CVE-2020-8580
>= 11.30 and < 11.60.3
SANtricity OS Controller Software versions 11.30 and higher are susceptible to a vulnerability which allows an unauthenticated att
7.5HIGH
CVE-2020-14803
>= 11.0.0 and <= 11.60.1
Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 1
5.3MEDIUM
CVE-2020-14798
>= 11.0.0 and <= 11.60.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affec
3.1LOW
CVE-2020-14797
>= 11.0.0 and <= 11.60.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affec
3.7LOW
CVE-2020-14796
>= 11.0.0 and <= 11.60.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affec
3.1LOW
CVE-2020-14792
>= 11.0.0 and <= 11.60.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affecte
4.2MEDIUM
CVE-2020-14782
>= 11.0.0 and <= 11.60.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affec
3.7LOW
CVE-2020-14781
>= 11.0.0 and <= 11.60.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected a
3.7LOW
CVE-2020-14779
>= 11.0.0 and <= 11.60.3
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are a
3.7LOW
CVE-2020-16166
>= 11.0.0 and <= 11.60.3
The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the i
3.7LOW
CVE-2020-14664
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u2
8.3HIGH
CVE-2020-14621
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected a
5.3MEDIUM
CVE-2020-14593
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are
7.4HIGH
CVE-2020-14583
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affec
8.3HIGH
CVE-2020-14581
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are
3.7LOW
CVE-2020-14579
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affec
3.7LOW
CVE-2020-14578
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affec
3.7LOW
CVE-2020-14577
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected a
3.7LOW
CVE-2020-14573
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.
3.7LOW
CVE-2020-14562
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.
5.3MEDIUM
CVE-2020-14556
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affec
4.8MEDIUM
CVE-2020-2830
>= 11.0.0 and <= 11.60.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are aff
5.3MEDIUM
CVE-2020-2816
>= 11.0.0 and <= 11.60.1
Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6
7.5HIGH
CVE-2020-2805
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affec
8.3HIGH
CVE-2020-2803
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affec
8.3HIGH
CVE-2020-2800
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions
4.8MEDIUM
CVE-2020-2781
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected a
5.3MEDIUM
CVE-2020-2778
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6
3.7LOW
CVE-2020-2773
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affect
3.7LOW
CVE-2020-2767
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6
4.8MEDIUM
CVE-2020-2757
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are a
3.7LOW
CVE-2020-2756
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are a
3.7LOW
CVE-2020-2755
>= 11.0.0 and <= 11.70.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affec
3.7LOW
CVE-2020-2754
>= 11.0.0 and <= 11.60.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affec
3.7LOW
CVE-2019-17273
>= 11.0.0 and <= 11.60.0
E-Series SANtricity OS Controller Software version 11.60.0 is susceptible to a vulnerability which allows an attacker to cause a D
6.5MEDIUM
CVE-2019-18282
>= 11.0.0 and <= 11.70.1
The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441
5.3MEDIUM
CVE-2020-2659
>= 11.0.0 and <= 11.60.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affe
3.7LOW
CVE-2020-2654
>= 11.0.0 and <= 11.60.1
Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7
3.7LOW
CVE-2020-2604
>= 11.0.0 and <= 11.60.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are a
8.1HIGH
CVE-2020-2601
>= 11.0.0 and <= 11.60.3
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affect
6.8MEDIUM
CVE-2020-2593
>= 11.0.0 and <= 11.60.3
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affe
4.8MEDIUM
CVE-2020-2590
>= 11.0.0 and <= 11.60.3
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affect
3.7LOW
CVE-2020-2585
>= 11.0 and <= 11.70.2
Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u2
5.9MEDIUM
CVE-2020-2583
>= 11.0.0 and <= 11.60.3
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are a
3.7LOW
CVE-2019-20095
>= 11.0.0 and <= 11.70.1
mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases t
5.5MEDIUM
CVE-2019-20054
>= 11.0 and <= 11.70.2
In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to
5.5MEDIUM
CVE-2019-19966
>= 11.0 and <= 11.70.2
In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause
4.6MEDIUM
CVE-2019-19965
>= 11.0.0 and <= 11.70.1
In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandlin
4.7MEDIUM
CVE-2019-19947
>= 11.0 and <= 11.70.2
In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/
4.6MEDIUM
CVE-2019-5108
>= 11.0.0 and <= 11.70.1
An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vu
6.5MEDIUM
CVE-2019-19922
>= 11.0 and <= 11.70.2
kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to c
5.5MEDIUM
CVE-2019-19069
>= 11.0.0 and <= 11.60.3
A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c in the Linux kernel before 5.3.9 allows attackers
7.5HIGH
CVE-2019-19063
all versions
Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11
4.6MEDIUM
CVE-2019-19061
all versions
A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allo
7.5HIGH
CVE-2019-19060
all versions
A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows att
7.5HIGH
CVE-2019-19057
all versions
Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel t
3.3LOW
CVE-2019-19054
all versions
A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allo
4.7MEDIUM
CVE-2019-19053
all versions
A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows at
7.5HIGH
CVE-2019-19052
all versions
A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to
7.5HIGH
CVE-2019-19050
>= 11.0.0 and <= 11.60.3
A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers
7.5HIGH
CVE-2019-19044
all versions
Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow at
7.5HIGH
CVE-2019-18805
>= 11.0.0 and <= 11.60.3
An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed in
9.8CRITICAL
CVE-2019-18683
>= 11.0.0 and <= 11.70.1
An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalat
7.0HIGH
CVE-2019-2999
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u2
4.7MEDIUM
CVE-2019-2996
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment). The supported version that is af
4.2MEDIUM
CVE-2019-2992
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are
3.7LOW
CVE-2019-2989
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affe
6.8MEDIUM
CVE-2019-2988
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are
3.7LOW
CVE-2019-2987
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 11.0.4 a
3.7LOW
CVE-2019-2983
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are a
3.7LOW
CVE-2019-2981
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected a
3.7LOW
CVE-2019-2978
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affe
3.7LOW
CVE-2019-2977
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.
4.8MEDIUM
CVE-2019-2975
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affec
4.8MEDIUM
CVE-2019-2973
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected a
3.7LOW
CVE-2019-2964
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are aff
3.7LOW
CVE-2019-2962
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are
3.7LOW
CVE-2019-2958
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affec
5.9MEDIUM
CVE-2019-2949
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affect
6.8MEDIUM
CVE-2019-2945
>= 11.0.0 and <= 11.50.2
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affe
3.1LOW
CVE-2019-16168
>= 11.0.0 and <= 11.60.3
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validati
6.5MEDIUM
CVE-2019-12261
>= 8.00 and <= 8.40.50.00
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET security vul
9.8CRITICAL
CVE-2019-12260
>= 8.00 and <= 8.40.50.00
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vulnerability:
9.8CRITICAL
CVE-2019-12258
>= 8.00 and <= 8.40.50.00
Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP c
7.5HIGH
CVE-2019-12255
>= 8.00 and <= 8.40.50.00
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent P
9.8CRITICAL
CVE-2019-12265
>= 8.00 and <= 8.40.50.00
Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET securit
5.3MEDIUM
CVE-2019-12263
>= 8.00 and <= 8.40.50.00
Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security vulnerabili
8.1HIGH
CVE-2019-12257
>= 8.00 and <= 8.40.50.00
Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: H
8.8HIGH
CVE-2019-12256
>= 8.00 and <= 8.40.50.00
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overfl
9.8CRITICAL
CVE-2019-13272
>= 11.0.0 and <= 11.60.3
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wa
7.8HIGH
CVE-2019-13115
>= 11.0.0 and <= 11.70.1
In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could
8.1HIGH
CVE-2019-13118
>= 11.0 and <= 11.50.2
In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid char
5.3MEDIUM
CVE-2019-11068
>= 11.0 and <= 11.70.2
libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access e
9.8CRITICAL
CVE-2018-18314
>= 11.0 and <= 11.40
Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
9.8CRITICAL
CVE-2018-18313
>= 11.0 and <= 11.40
Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from
9.1CRITICAL
CVE-2018-18311
all versions
Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write ope
9.8CRITICAL
CVE-2018-18312
>= 11.0 and <= 11.40
Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write ope
9.8CRITICAL
CVE-2018-18066
>= 11.0 and <= 11.5
snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthentica
7.5HIGH
CVE-2018-18065
>= 11.0 and <= 11.5
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authent
6.5MEDIUM
CVE-2018-5492
>= 11.0 and <= 11.40
NetApp E-Series SANtricity OS Controller Software 11.30 and later version 11.30.5 is susceptible to unauthenticated remote code ex
9.8CRITICAL
CVE-2018-2973
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affec
5.9MEDIUM
CVE-2018-2964
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java
8.3HIGH
CVE-2018-2952
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported version
3.7LOW
CVE-2018-2942
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL). Supported versions that are affected are Jav
8.3HIGH
CVE-2018-2941
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE:
8.3HIGH
CVE-2018-2940
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are
4.3MEDIUM
CVE-2018-2938
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported versions that are affected are Java SE
9.0CRITICAL
CVE-2017-7658
>= 11.0 and <= 11.50.1
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations
9.8CRITICAL
CVE-2017-7657
>= 11.0 and <= 11.50.1
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 complian
9.8CRITICAL
CVE-2018-12538
>= 11.0 and <= 11.40
In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage
8.8HIGH
CVE-2018-2826
>= 11.0 and <= 11.40
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java
8.3HIGH
CVE-2018-2825
>= 11.0 and <= 11.40
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java
8.3HIGH
CVE-2018-5968
>= 11.0.0 and <= 11.60.3
FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incom
8.1HIGH
CVE-2018-2638
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java
8.3HIGH
CVE-2018-2627
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Supported versions that are affected are Java
7.5HIGH
CVE-2018-2581
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE:
4.7MEDIUM
CVE-2017-17485
>= 11.0.0 and <= 11.60.3
FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incom
9.8CRITICAL
CVE-2016-8610
>= 11.0 and <= 11.40
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol define
7.5HIGH
CVE-2017-10388
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are
7.5HIGH
CVE-2017-10357
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that
5.3MEDIUM
CVE-2017-10356
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions t
6.2MEDIUM
CVE-2017-10355
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions
5.3MEDIUM
CVE-2017-10350
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are aff
5.3MEDIUM
CVE-2017-10349
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affec
5.3MEDIUM
CVE-2017-10348
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are
5.3MEDIUM
CVE-2017-10347
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affec
5.3MEDIUM
CVE-2017-10346
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are af
9.6CRITICAL
CVE-2017-10345
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versi
3.1LOW
CVE-2017-10309
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java
7.1HIGH
CVE-2017-10295
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions
4.0MEDIUM
CVE-2017-10293
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE
6.1MEDIUM
CVE-2017-10285
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affect
9.6CRITICAL
CVE-2017-10281
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versi
5.3MEDIUM
CVE-2017-10274
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are J
6.8MEDIUM
CVE-2017-10243
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions tha
6.5MEDIUM
CVE-2017-10198
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions t
6.8MEDIUM
CVE-2017-10193
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are a
3.1LOW
CVE-2017-10176
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions t
7.5HIGH
CVE-2017-10135
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that a
5.9MEDIUM
CVE-2017-10125
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java
7.1HIGH
CVE-2017-10118
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that a
7.5HIGH
CVE-2017-10116
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions t
8.3HIGH
CVE-2017-10115
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that a
7.5HIGH
CVE-2017-10114
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE:
8.3HIGH
CVE-2017-10111
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that i
9.6CRITICAL
CVE-2017-10110
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u
9.6CRITICAL
CVE-2017-10109
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versi
5.3MEDIUM
CVE-2017-10108
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versi
5.3MEDIUM
CVE-2017-10107
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affect
9.6CRITICAL
CVE-2017-10105
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java
4.3MEDIUM
CVE-2017-10102
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affect
9.0CRITICAL
CVE-2017-10101
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affec
9.6CRITICAL
CVE-2017-10096
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affec
9.6CRITICAL
CVE-2017-10090
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are
9.6CRITICAL
CVE-2017-10089
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE
9.6CRITICAL
CVE-2017-10087
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are
9.6CRITICAL
CVE-2017-10086
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE:
9.6CRITICAL
CVE-2017-10081
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are af
4.3MEDIUM
CVE-2017-10078
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported version that is affected is Java
8.1HIGH
CVE-2017-10074
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are af
8.3HIGH
CVE-2017-10067
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java S
7.5HIGH
CVE-2017-10053
>= 11.0 and <= 11.70.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that ar
5.3MEDIUM
CVE-2016-9841
>= 11.0.0 and <= 11.70.1
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmet
9.8CRITICAL
CVE-2016-10165
all versions
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or caus
7.1HIGH
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin