CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,340 CVEs published, 272 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,340
Show in the list
Critical, last 7 days
272
Show in the list
Healthcare-tagged, last 7 days
6
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product oracle:communications_pricing_design_center. Show all products

Free: a daily email for up to 3 products and the weekly digest. No card, no password. By continuing you agree to the Terms and Privacy Policy.

28 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2026-47007High 7.3Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications (component: On-premise Deployment).
Assigned by oracle
Jul 21, 2026
CVE-2021-45105
Healthcare
Medium 5.9Apache Log4j2 does not always protect from infinite recursion in lookup evaluation
Assigned by apache
Dec 18, 2021
CVE-2021-2351
Healthcare
High 8.3Vulnerability in the Advanced Networking Option component of Oracle Database Server.
Assigned by oracle
Jul 20, 2021
CVE-2021-33037
Healthcare
Medium 5.3Incorrect Transfer-Encoding handling with HTTP/1.0
Assigned by apache
Jul 12, 2021
CVE-2021-30640Medium 6.5Auth weakness in JNDIRealm
Assigned by apache
Jul 12, 2021
CVE-2021-29425
Healthcare
Medium 6.5Possible limited path traversal vulnerabily in Apache Commons IO
Assigned by apache
Apr 13, 2021
CVE-2021-23336Medium 5.9Web Cache Poisoning
Assigned by snyk
Feb 15, 2021
CVE-2021-3177Critical 9.8Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untru…
Assigned by mitre
Jan 18, 2021
CVE-2020-36183High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.
Assigned by mitre
Jan 6, 2021
CVE-2020-36185High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.
Assigned by mitre
Jan 6, 2021

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Essential cookies only, unless you allow a Google ads cookie. See our .