threat
engine
.sh
Back
·
··:··
Home
/
Product
/
oracle nosql database
Product
oracle nosql database
12 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
Sort
Newest first
Oldest first
Highest CVSS
Lowest CVSS
Min CVSS
Any
4.0+
7.0+ (High)
9.0+ (Critical)
Published since
Reset
CVE-2021-21409
< 21.1.12
Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high perfor
5.9
MEDIUM
CVE-2021-22884
< 20.3
Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhos
7.5
HIGH
CVE-2021-22883
< 20.3
Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempt
7.5
HIGH
CVE-2021-23840
< 20.3
Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the
7.5
HIGH
CVE-2021-21290
< 20.3
Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high perfor
6.2
MEDIUM
CVE-2020-8908
< 20.3
A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potent
3.3
LOW
CVE-2020-13956
< 20.3
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed
5.3
MEDIUM
CVE-2020-11612
< 20.3
The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An a
7.5
HIGH
CVE-2019-10219
< 21.1.12
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting
6.1
MEDIUM
CVE-2018-1320
< 19.3.12
Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apach
7.5
HIGH
CVE-2018-14718
< 19.3.12
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block
9.8
CRITICAL
CVE-2018-1000873
< 19.3.12
Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that ca
6.5
MEDIUM
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin