InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product oracle:peoplesoft_enterprise_peopletools. Show all products

98 CVEs, showing 51 to 98PreviousPage 2 of 2
CVESeverityTitlePublished
CVE-2021-37137High 7.5The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage.
Assigned by JFROG
Oct 19, 2021
CVE-2021-37136High 7.5The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression).
Assigned by JFROG
Oct 19, 2021
CVE-2021-22947Medium 5.9When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that c…
Assigned by hackerone
Sep 29, 2021
CVE-2021-22946High 7.5A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSES…
Assigned by hackerone
Sep 29, 2021
CVE-2021-40690High 7.5Bypass of the secureValidation property
Assigned by apache
Sep 19, 2021
CVE-2021-3711Critical 9.8SM2 Decryption Buffer Overflow
Assigned by openssl
Aug 24, 2021
CVE-2021-37714High 7.5Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions
Assigned by GitHub_M
Aug 18, 2021
CVE-2021-22924Low 3.7libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take…
Assigned by hackerone
Aug 5, 2021
CVE-2021-22926High 7.5libcurl-using applications can ask for a specific client certificate to be used in a transfer.
Assigned by hackerone
Aug 5, 2021
CVE-2021-22925Medium 5.3curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl.
Assigned by hackerone
Aug 5, 2021
CVE-2021-2351
Healthcare
High 8.3Vulnerability in the Advanced Networking Option component of Oracle Database Server.
Assigned by oracle
Jul 20, 2021
CVE-2021-36090
Healthcare
High 7.5Apache Commons Compress 1.0 to 1.20 denial of service vulnerability
Assigned by apache
Jul 13, 2021
CVE-2021-35517
Healthcare
High 7.5Apache Commons Compress 1.1 to 1.20 denial of service vulnerability
Assigned by apache
Jul 13, 2021
CVE-2021-35516
Healthcare
High 7.5Apache Commons Compress 1.6 to 1.20 denial of service vulnerability
Assigned by apache
Jul 13, 2021
CVE-2021-35515
Healthcare
High 7.5Apache Commons Compress 1.6 to 1.20 denial of service vulnerability
Assigned by apache
Jul 13, 2021
CVE-2021-3517High 8.6There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11.
Assigned by redhat
May 19, 2021
CVE-2021-3518High 8.8There's a flaw in libxml2 in versions before 2.9.11.
Assigned by redhat
May 18, 2021
CVE-2021-3537Medium 5.9A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference.
Assigned by redhat
May 14, 2021
CVE-2021-3450High 7.4CA certificate check bypass with X509_V_FLAG_X509_STRICT
Assigned by openssl
Mar 25, 2021
CVE-2021-3449Medium 5.9NULL pointer deref in signature_algorithms processing
Assigned by openssl
Mar 25, 2021
CVE-2021-21345Critical 9.9XStream is a Java library to serialize objects to XML and back again.Mar 23, 2021
CVE-2021-28363Medium 6.5The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies.
Assigned by mitre
Mar 15, 2021
CVE-2021-27568Medium 5.9An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4.
Assigned by mitre
Feb 23, 2021
CVE-2021-23337High 7.2Command Injection
Assigned by snyk
Feb 15, 2021
CVE-2020-28500Medium 5.3Regular Expression Denial of Service (ReDoS)
Assigned by snyk
Feb 15, 2021
CVE-2020-8286High 7.5curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
Assigned by hackerone
Dec 14, 2020
CVE-2020-8285High 7.5curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
Assigned by hackerone
Dec 14, 2020
CVE-2020-8284Low 3.7A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about ser…
Assigned by hackerone
Dec 14, 2020
CVE-2020-13956Medium 5.3Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host…
Assigned by apache
Dec 2, 2020
CVE-2020-24977Medium 6.5GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c.
Assigned by mitre
Sep 3, 2020
CVE-2020-11022
Healthcare
Medium 6.9jQuery has a potential XSS vulnerability
Assigned by GitHub_M
Apr 29, 2020
CVE-2020-1967High 7.5Segmentation fault in SSL_check_chain
Assigned by openssl
Apr 21, 2020
CVE-2020-7595High 7.5xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
Assigned by mitre
Jan 21, 2020
CVE-2019-20388High 7.5xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.
Assigned by mitre
Jan 21, 2020
CVE-2019-1551Medium 5.3rsaz_512_sqr overflow bug on x86_64
Assigned by openssl
Dec 6, 2019
CVE-2019-10219
Healthcare
Medium 6.5A vulnerability was found in Hibernate-Validator.
Assigned by redhat
Nov 8, 2019
CVE-2019-17195
Healthcare
Critical 9.8Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authenti…
Assigned by mitre
Oct 15, 2019
CVE-2019-16056Medium 5.3An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4.
Assigned by mitre
Sep 6, 2019
CVE-2019-10086
Healthcare
High 7.3In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Ja…
Assigned by apache
Aug 20, 2019
CVE-2019-2725
Known exploited
High 7.5Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).
Assigned by oracle
Apr 26, 2019
CVE-2019-11358
Healthcare
Medium 6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution.
Assigned by mitre
Apr 19, 2019
CVE-2019-3856High 7.5An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed.
Assigned by redhat
Mar 25, 2019
CVE-2019-3857High 7.5An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed.
Assigned by redhat
Mar 25, 2019
CVE-2019-3855High 7.5An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server.
Assigned by redhat
Mar 21, 2019
CVE-2018-5407Medium 4.7Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.
Assigned by certcc
Nov 15, 2018
CVE-2018-0734Medium 5.9Timing attack against DSA
Assigned by openssl
Oct 30, 2018
CVE-2018-0735Medium 5.9Timing attack against ECDSA signature generation
Assigned by openssl
Oct 29, 2018
CVE-2015-9251
Healthcare
Medium 6.1jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
Assigned by mitre
Jan 18, 2018
PreviousPage 2 of 2

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.