Vulnerabilities > Oracle > ZFS Storage Appliance > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-02-15 CVE-2021-23336 HTTP Request Smuggling vulnerability in multiple products
The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking.
5.9
2021-01-20 CVE-2021-1999 Unspecified vulnerability in Oracle products
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: RAS subsystems).
local
high complexity
oracle
5.0
2021-01-20 CVE-2021-1993 Unspecified vulnerability in Oracle products
Vulnerability in the Java VM component of Oracle Database Server.
network
high complexity
oracle
4.8
2019-09-09 CVE-2019-16168 Divide By Zero vulnerability in multiple products
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."
6.5