İçeriğe atla
Noroxi

oracle kayıtları

oracle üreticisine ait 12.967 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
84 · %0,6
Silahlaştırılmış
174 · %1,3
Pre-auth RCE
269
Düzeltme kaydı olan
%22,9
Yayından KEV’e ortanca
1551 gün

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

10.000+ kayıt
  • CVE-2017-5638
    99Hemen

    The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-mes

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    apache · struts10 Mar 2017

  • CVE-2017-9841
    99Hemen

    Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST da

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    phpunit project · phpunit27 Haz 2017

  • CVE-2014-6271
    99Hemen

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attac

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    gnu · bash24 Eyl 2014

  • CVE-2013-2251
    99Hemen

    Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:,

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    apache · archiva19 Tem 2013

  • CVE-2020-14882
    99Hemen

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    oracle · weblogic server21 Eki 2020

  • CVE-2021-41773
    99Hemen

    Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    apache · http server5 Eki 2021

  • CVE-2021-42013
    99Hemen

    Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    apache · http server7 Eki 2021

  • CVE-2019-2725
    99Hemen

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    oracle · agile product lifecycle management26 Nis 2019

  • CVE-2018-2628
    99Hemen

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    oracle · weblogic server18 Nis 2018

  • CVE-2014-7169
    99Hemen

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variabl

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    gnu · bash24 Eyl 2014

  • CVE-2022-22963
    99Hemen

    In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    vmware · spring cloud function1 Nis 2022

  • CVE-2025-61882
    99Hemen

    Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    oracle · concurrent processing5 Eki 2025

  • CVE-2017-1000353
    99Hemen

    Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    jenkins · jenkins29 Oca 2018

  • CVE-2022-22965
    99Hemen

    A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    vmware · spring framework1 Nis 2022

  • CVE-2020-1938
    99Hemen

    When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    apache · geode24 Şub 2020

  • CVE-2020-14750
    99Hemen

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    oracle · weblogic server2 Kas 2020

  • CVE-2013-2465
    99Hemen

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    oracle · jre18 Haz 2013

  • CVE-2012-4681
    99Hemen

    Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    oracle · jdk27 Ağu 2012

  • CVE-2022-21587
    99Hemen

    Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    oracle · e-business suite18 Eki 2022

  • CVE-2022-22947
    99Hemen

    In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuat

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %98

    vmware · spring cloud gateway3 Mar 2022

  • CVE-2012-0507
    98Hemen

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier,

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    oracle · jre7 Haz 2012

  • CVE-2020-2555
    98Hemen

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    oracle · access manager15 Oca 2020

  • CVE-2013-0422
    98Hemen

    Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBean

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    oracle · jdk10 Oca 2013

  • CVE-2018-1273
    98Hemen

    Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerabilit

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    broadcom · spring data commons11 Nis 2018

  • CVE-2011-3544
    98Hemen

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remot

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    oracle · jdk19 Eki 2011