Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

open integration gateway vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2024-3094
Malicious code exists in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific fun...
Tukaani Xz 5.6.1Tukaani Xz 5.6.0
NA
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Ietf Http 2.0Nghttp2 Nghttp2Netty NettyEnvoyproxy Envoy 1.27.0Envoyproxy Envoy 1.26.4Envoyproxy Envoy 1.25.9Envoyproxy Envoy 1.24.10Eclipse JettyCaddyserver CaddyGolang Http2Golang GoGolang NetworkingF5 Big-ip AnalyticsF5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Global Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Domain Name SystemF5 Big-ip Application Security ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall Manager
4.3
CVSSv2
CVE-2020-11022
In jQuery versions greater than or equal to 1.2 and prior to 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuer...
Jquery JqueryDrupal DrupalDebian Debian Linux 9.0Fedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Oracle Weblogic Server 12.1.3.0.0Oracle Jdeveloper 11.1.1.9.0Oracle Retail Back Office 14.1Oracle Retail Back Office 14.0Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Weblogic Server 10.3.6.0.0Oracle Communications Webrtc Session Controller 7.2Oracle Weblogic Server 12.2.1.3.0Oracle Agile Product Lifecycle Management For Process 6.2.0.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Application Testing Suite 13.3.0.1Oracle Retail Returns Management 14.0Oracle Retail Returns Management 14.1Oracle Jdeveloper 12.2.1.3.0Oracle Policy Automation Connector For Siebel 10.4.6Oracle Financial Services Market Risk Measurement And Management 8.0.6
4.3
CVSSv2
CVE-2018-1271
Spring Framework, versions 5.0 before 5.0.5 and versions 4.3 before 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on Windows (as opposed to th...
Vmware Spring FrameworkOracle Retail Xstore Point Of Service 7.1Oracle Enterprise Manager Ops Center 12.2.2Oracle Primavera Gateway 16.2Oracle Primavera Gateway 15.2Oracle Application Testing Suite 12.5.0.3Oracle Retail Back Office 14.1Oracle Retail Back Office 14.0Oracle Enterprise Manager Ops Center 12.3.3Oracle Retail Open Commerce Platform 6.0.1Oracle Application Testing Suite 13.1.0.1Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Communications Diameter Signaling RouterOracle Communications Performance Intelligence CenterOracle Communications Services GatekeeperOracle Health Sciences Information Manager 3.0Oracle Healthcare Master Person Index 3.0Oracle Healthcare Master Person Index 4.0Oracle Insurance Calculation Engine 10.2Oracle Insurance Rules Palette 10.0Oracle Insurance Rules Palette 10.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook