CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,443 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,443
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product oracle:zfs_storage_appliance_kit. Show all products

46 CVEs, showing 1 to 46
CVESeverityTitlePublished
CVE-2019-13057Medium 4.9An issue was discovered in the server in OpenLDAP before 2.4.48.
Assigned by mitre
Jul 26, 2019
CVE-2019-13565High 7.5An issue was discovered in OpenLDAP 2.x before 2.4.48.
Assigned by mitre
Jul 26, 2019
CVE-2019-16056Medium 5.3An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4.
Assigned by mitre
Sep 6, 2019
CVE-2019-10219
Healthcare
Medium 6.5A vulnerability was found in Hibernate-Validator.
Assigned by redhat
Nov 8, 2019
CVE-2020-9327High 7.5In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.
Assigned by mitre
Feb 21, 2020
CVE-2020-11656Critical 9.8In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.
Assigned by mitre
Apr 9, 2020
CVE-2020-11655High 7.5SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.
Assigned by mitre
Apr 9, 2020
CVE-2020-12243High 7.5In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
Assigned by mitre
Apr 28, 2020
CVE-2020-13632Medium 5.5ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
Assigned by mitre
May 27, 2020
CVE-2020-13631Medium 5.5SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.
Assigned by mitre
May 27, 2020
CVE-2020-13630High 7.0ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
Assigned by mitre
May 27, 2020
CVE-2020-13871High 7.5SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.
Assigned by mitre
Jun 6, 2020
CVE-2019-20907Medium 5.5In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
Assigned by mitre
Jul 13, 2020
CVE-2020-1472
Known exploited
Medium 5.5Netlogon Elevation of Privilege Vulnerability
Assigned by microsoft
Aug 17, 2020
CVE-2020-26116High 7.2http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by ins…
Assigned by mitre
Sep 27, 2020
CVE-2021-3177Critical 9.8Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untru…
Assigned by mitre
Jan 19, 2021
CVE-2021-20227Medium 5.5A flaw was found in SQLite's SELECT query functionality (src/select.c).
Assigned by redhat
Mar 23, 2021
CVE-2021-3449Medium 5.9NULL pointer deref in signature_algorithms processing
Assigned by openssl
Mar 25, 2021
CVE-2021-29921Critical 9.8In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string.
Assigned by mitre
May 6, 2021
CVE-2021-3517High 8.6There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11.
Assigned by redhat
May 19, 2021
CVE-2021-3426Medium 5.7There's a flaw in Python 3's pydoc.
Assigned by redhat
May 20, 2021
CVE-2021-3516High 7.8There's a flaw in libxml2's xmllint in versions before 2.9.11.
Assigned by redhat
Jun 1, 2021
CVE-2021-3520Critical 9.8There's a flaw in lz4.
Assigned by redhat
Jun 2, 2021
CVE-2021-3541Medium 6.5A flaw was found in libxml2.
Assigned by redhat
Jul 9, 2021
CVE-2021-36690High 7.5A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query.
Assigned by mitre
Aug 24, 2021
CVE-2021-3711Critical 9.8SM2 Decryption Buffer Overflow
Assigned by openssl
Aug 24, 2021
CVE-2021-40438
Known exploited
Critical 9.0mod_proxy SSRF
Assigned by apache
Sep 16, 2021
CVE-2021-41617High 7.0sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected.
Assigned by mitre
Sep 26, 2021
CVE-2021-4034
Known exploited
High 7.8A local privilege escalation vulnerability was found on polkit's pkexec utility.
Assigned by redhat
Jan 28, 2022
CVE-2022-0391High 7.5A flaw was found in Python, specifically within the urllib.parse module.
Assigned by redhat
Feb 9, 2022
CVE-2022-25236Critical 9.8xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
Assigned by mitre
Feb 16, 2022
CVE-2022-25235Critical 9.8xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.
Assigned by mitre
Feb 16, 2022
CVE-2022-25313Medium 6.5In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.
Assigned by mitre
Feb 18, 2022
CVE-2022-25315Critical 9.8In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
Assigned by mitre
Feb 18, 2022
CVE-2022-25314High 7.5In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.
Assigned by mitre
Feb 18, 2022
CVE-2022-23308High 7.5valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
Assigned by mitre
Feb 26, 2022
CVE-2022-29824Medium 6.5In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows.
Assigned by mitre
May 3, 2022
CVE-2025-53046Medium 4.9Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Analytics).Oct 21, 2025
CVE-2025-62289Medium 4.9Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Filesystems).Oct 21, 2025
CVE-2025-62290High 7.2Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Block Storage).Oct 21, 2025
CVE-2025-62475Medium 4.9Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core).Oct 21, 2025
CVE-2025-62476Medium 4.9Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Remote Replication).Oct 21, 2025
CVE-2025-62477Medium 4.9Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Remote Replication).Oct 21, 2025
CVE-2025-62478Medium 4.9Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Object Store).Oct 21, 2025
CVE-2025-62479Low 2.7Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Block Storage).Oct 21, 2025
CVE-2025-62480Low 2.7Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Naming Subsystem).Oct 21, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.