CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,443 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,443
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product oracle:communications_cloud_native_core_binding_support_function. Show all products

38 CVEs, showing 1 to 38
CVESeverityTitlePublished
CVE-2022-22965
Known exploited
Critical 9.8A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.
Assigned by vmware
Apr 1, 2022
CVE-2021-3737High 7.5A flaw was found in python.
Assigned by redhat
Mar 4, 2022
CVE-2022-22947
Known exploited
Critical 10.0In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured.
Assigned by vmware
Mar 3, 2022
CVE-2022-23308High 7.5valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
Assigned by mitre
Feb 26, 2022
CVE-2022-23219Critical 9.8The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may…
Assigned by mitre
Jan 14, 2022
CVE-2021-43797Medium 6.5HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling
Assigned by GitHub_M
Dec 9, 2021
CVE-2021-43396High 7.5In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an inter…
Assigned by mitre
Nov 4, 2021
CVE-2021-37137High 7.5The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage.
Assigned by JFROG
Oct 19, 2021
CVE-2021-37136High 7.5The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression).
Assigned by JFROG
Oct 19, 2021
CVE-2021-22947Medium 5.9When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that c…
Assigned by hackerone
Sep 29, 2021
CVE-2021-22946High 7.5A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSES…
Assigned by hackerone
Sep 29, 2021
CVE-2021-39152High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39150High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39140Medium 6.3XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39154High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39153High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39151High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39149High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39148High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39147High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39146High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39145High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39141High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39139High 8.8XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39144
Known exploited
High 8.5XStream is vulnerable to a Remote Command Execution attack
Assigned by GitHub_M
Aug 23, 2021
CVE-2021-38604High 7.5In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference.
Assigned by mitre
Aug 12, 2021
CVE-2021-37159Medium 6.4hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.
Assigned by mitre
Jul 21, 2021
CVE-2021-22897Medium 5.3curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library.
Assigned by hackerone
Jun 11, 2021
CVE-2021-22901High 8.1curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection.
Assigned by hackerone
Jun 11, 2021
CVE-2021-22898Low 3.1curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers.
Assigned by hackerone
Jun 11, 2021
CVE-2021-33560High 7.5Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen app…
Assigned by mitre
Jun 8, 2021
CVE-2021-22118
Healthcare
High 7.8In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory,…
Assigned by vmware
May 27, 2021
CVE-2021-3426Medium 5.7There's a flaw in Python 3's pydoc.
Assigned by redhat
May 20, 2021
CVE-2021-29921Critical 9.8In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string.
Assigned by mitre
May 6, 2021
CVE-2021-23337High 7.2Command Injection
Assigned by snyk
Feb 15, 2021
CVE-2020-17527High 7.5Apache Tomcat: Request header mix-up between HTTP/2 streams
Assigned by apache
Dec 3, 2020
CVE-2020-9484High 7.0When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server;…
Assigned by apache
May 20, 2020
CVE-2019-10219
Healthcare
Medium 6.5A vulnerability was found in Hibernate-Validator.
Assigned by redhat
Nov 8, 2019

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.