[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWYXEaweQh4SawPYKJrSmiHr76V5L9Ci5O_8aJqlSWLg":3,"g5a-ex:oracle\u002Fnosql_database@*":106,"g5a-family:oracle\u002Fnosql_database":108},{"success":4,"data":5},true,{"product":6,"versions":21,"topVulnerabilitiesByEpss":24,"kevVulnerabilities":83,"seoMetadata":84,"meta":103},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":20},"oracle","nosql_database",2,12,0,"2021-03-30",[14,18],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"19.3.12",1,false,{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},"20.3","Nosql Database by Oracle is a technology product with 2 tracked versions and 12 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[22,23],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},[25,33,38,42,49,54,61,66,71,77],{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":32},"CVE-2021-22883","Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.","2021-03-03",7.5,"v3.1","High",0.77385,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":37},"CVE-2021-23840","Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).","2021-02-16",0.50732,{"cveId":39,"description":40,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":41},"CVE-2021-22884","Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6”. When “localhost6” is not present in \u002Fetc\u002Fhosts, it is just an ordinary domain that is resolved via DNS, i.e., over network. If the attacker controls the victim's DNS server or can spoof its responses, the DNS rebinding protection can be bypassed by using the “localhost6” domain. As long as the attacker uses the “localhost6” domain, they can still apply the attack described in CVE-2018-7160.",0.36842,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":30,"severity":47,"isKev":17,"epssScore":48},"CVE-2018-14718","FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.","2019-01-02",9.8,"Critical",0.12679,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":53},"CVE-2020-11612","The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder.","2020-04-07",0.09188,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":30,"severity":59,"isKev":17,"epssScore":60},"CVE-2020-13956","Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.","2020-12-02",5.3,"Medium",0.09032,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":65},"CVE-2018-1320","Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.","2019-01-07",0.08188,{"cveId":67,"description":68,"publishedDate":12,"cvssScore":69,"cvssVersion":30,"severity":59,"isKev":17,"epssScore":70},"CVE-2021-21409","Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.61.Final there is a vulnerability that enables request smuggling. The content-length header is not correctly validated if the request only uses a single Http2HeaderFrame with the endStream set to to true. This could lead to request smuggling if the request is proxied to a remote peer and translated to HTTP\u002F1.1. This is a followup of GHSA-wm47-8v5p-wjpj\u002FCVE-2021-21295 which did miss to fix this one case. This was fixed as part of 4.1.61.Final.",5.9,0.04935,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":30,"severity":59,"isKev":17,"epssScore":76},"CVE-2018-1000873","Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The victim deserializes malicious input, specifically very large values in the nanoseconds field of a time value. This vulnerability appears to have been fixed in 2.9.8.","2018-12-20",6.5,0.04758,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":81,"cvssVersion":30,"severity":59,"isKev":17,"epssScore":82},"CVE-2019-10219","A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.","2019-11-08",6.1,0.02157,[],{"title":85,"metaDescription":86,"keywords":87,"structuredData":88},"Nosql Database by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Nosql Database by Oracle covering 2 versions with 12 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Nosql Database vulnerabilities, Nosql Database security, Nosql Database CVE, Oracle Nosql Database, Nosql Database threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":89,"@type":90,"name":91,"description":86,"url":92,"manufacturer":93,"applicationCategory":97,"softwareVersion":98,"mainEntity":99},"https:\u002F\u002Fschema.org","SoftwareApplication","Nosql Database","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fnosql_database",{"@type":94,"name":95,"url":96},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","2 versions tracked",{"@type":100,"name":101,"description":102,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Nosql Database Security Vulnerabilities","Security vulnerabilities affecting Nosql Database by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":104,"apiVersion":105},"2026-10-17T12:38:15.587Z","3.0",{"rows":107,"total":11,"capped":17,"failed":11},[],[]]