Oracle WebLogic Server - Remote Code Execution

Oracle WebLogic Server 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 contains a remote code execution caused by unauthenticated access via T3, IIOP, letting attackers take over the server, exploit requires network access. id: CVE-2021-2135 info: name: Oracle WebLogic Server - Remote Code Execution author:...

ROOT-OS-UBUNTU-2404-CVE-2021-3864 CVE-2021-3864 in rootio-linux - Patched by Root

Root has patched CVE-2021-3864 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2021-3714 CVE-2021-3714 in rootio-linux - Patched by Root

Root has patched CVE-2021-3714 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2021-26934 CVE-2021-26934 in rootio-linux - Patched by Root

Root has patched CVE-2021-26934 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2021-3714 CVE-2021-3714 in rootio-linux - Patched by Root

Root has patched CVE-2021-3714 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2021-47432 CVE-2021-47432 in rootio-linux - Patched by Root

Root has patched CVE-2021-47432 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2021-4095 CVE-2021-4095 in rootio-linux - Patched by Root

Root has patched CVE-2021-4095 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

Download Monitor < 4.4.5 - SQL Injection

The Download Monitor plugin for WordPress is vulnerable to SQL injection via the 'orderby' parameter in versions before 4.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attacker...

Kramer VIAware - Privilege Escalation and Remote Code Execution

Kramer VIAware, all tested versions, allow privilege escalation and remote code execution due to misconfigured sudo permissions. Attackers can execute arbitrary system commands remotely if the web interface is accessible, due to vulnerabilities in the handling of privileged operations through...

Images to WebP < 1.9 - Authenticated Local File Inclusion

The Images to WebP WordPress plugin before version 1.9 did not validate or sanitize the tab parameter before using it in the include function. id: CVE-2021-24644 info: name: Images to WebP 1.9 - Authenticated Local File Inclusion author: Sourabh-Sahu severity: high description: | The Images to We...

ROOT-OS-DEBIAN-13-CVE-2021-26934 CVE-2021-26934 in rootio-linux - Patched by Root

Root has patched CVE-2021-26934 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2021-3847 CVE-2021-3847 in rootio-linux - Patched by Root

Root has patched CVE-2021-3847 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2021-3714 CVE-2021-3714 in rootio-linux - Patched by Root

Root has patched CVE-2021-3714 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2021-3864 CVE-2021-3864 in rootio-linux - Patched by Root

Root has patched CVE-2021-3864 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2021-45105 CVE-2021-45105 in io.root.org.apache.logging.log4j:log4j-core - Patched by Root

Root has patched CVE-2021-45105 in the io.root.org.apache.logging.log4j:log4j-core package for Root:Maven. Multiple fixed versions available...

CVE-2021-47985

creationtimestamp| type| source ---|---|--- 2026-06-19 16:04:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monpt5yk642x...

CVE-2021-24217

creationtimestamp| type| source ---|---|--- 2026-06-19 12:48:06+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b4d293c6-01ac-4be3-99ba-fd4146b800cc 2026-06-23 14:04:02+00:00| exploited|...

CVE-2021-24370

creationtimestamp| type| source ---|---|--- 2026-06-19 12:48:06+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d01d9068-7ecb-44d7-9edf-53e7d18187f0 2026-06-23 14:04:02+00:00| exploited|...

CVE-2021-20083

creationtimestamp| type| source ---|---|--- 2026-06-19 12:47:29+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d76544ca-fc11-400a-a630-e448451d3813 2026-06-23 14:04:03+00:00| exploited|...

Astra Linux – Vulnerability in Chromium

Chromium: CVE-2021-30622 – Use after free in WebApp installations...