oracle commerce merchandising vulnerabilities and exploits

(subscribe to this query)

Vulnerability in the Oracle Commerce Merchandising component of Oracle Commerce (subcomponent: Asset Manager). The supported version that is affected is 11.2.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Co...

Oracle Commerce Merchandising 11.2.0.3

A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote malicious users to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs.

It was possible to execute a ReDoS-type attack inside CKEditor 4 prior to 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space (in the Autolink plugin).

Ckeditor Ckeditor Oracle Agile Plm 9.3.5 Oracle Agile Plm 9.3.6 Oracle Application Express Oracle Banking Party Management 2.7.0 Oracle Commerce Merchandising 11.1.0 Oracle Commerce Merchandising 11.2.0 Oracle Commerce Merchandising Oracle Financial Services Analytical Applications Infrastructure Oracle Financial Services Analytical Applications Infrastructure 8.1.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.1 Oracle Financial Services Model Management And Governance Oracle Jd Edwards Enterpriseone Tools Oracle Siebel Ui Framework Oracle Webcenter Sites 12.2.1.3.0 Oracle Webcenter Sites 12.2.1.4.0

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Clipboard](https://ckeditor.com/cke4/addon/clipboard) package. The vulnerability allowed to abuse paste functionality using malformed HTML, which...

Ckeditor Ckeditor Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Commerce Guided Search 11.3.2 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Commerce Merchandising 11.3.2 Oracle Jd Edwards Enterpriseone Tools Oracle Documaker 12.6.3 Oracle Documaker 12.6.4 Oracle Banking Party Management 2.7.0 Oracle Financial Services Analytical Applications Infrastructure Oracle Application Express

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Fake Objects](https://ckeditor.com/cke4/addon/fakeobjects) package. The vulnerability allowed to inject malformed Fake Objects HTML, which could ...

Ckeditor Ckeditor Debian Debian Linux 9.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Financial Services Analytical Applications Infrastructure 8.0.3 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Commerce Guided Search 11.3.2 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Commerce Merchandising 11.3.2 Oracle Jd Edwards Enterpriseone Tools Oracle Documaker 12.6.3 Oracle Documaker 12.6.4 Oracle Financial Services Model Management And Governance Oracle Banking Party Management 2.7.0 Oracle Financial Services Analytical Applications Infrastructure Oracle Application Express

ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside the undo feature. The vulnerability allows a user to abuse undo functionality using malformed widget HTML, which could re...

All versions of Apache Santuario - XML Security for Java before 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an malicious user to abuse an XP...

3 Github repositories

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing ...

Ckeditor Ckeditor Drupal Drupal Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Commerce Merchandising 11.3.2 Oracle Financial Services Trade-based Anti Money Laundering 8.0.7 Oracle Financial Services Trade-based Anti Money Laundering 8.0.8 Fedoraproject Fedora 36 Oracle Financial Services Analytical Applications Infrastructure 8.1.2.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.1.0 Oracle Application Express Oracle Financial Services Analytical Applications Infrastructure 8.1.2.1 Oracle Financial Services Behavior Detection Platform Oracle Financial Services Analytical Applications Infrastructure Oracle Financial Services Behavior Detection Platform 8.0.8.0 Oracle Financial Services Behavior Detection Platform 8.0.7.0 Fedoraproject Fedora 37

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the `dialog` plugin. The vulnerability allows abuse of a dialog input validator regular expression, which can cause a significant performance drop r...

Ckeditor Ckeditor Drupal Drupal Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Commerce Merchandising 11.3.2 Oracle Financial Services Trade-based Anti Money Laundering 8.0.7 Oracle Financial Services Trade-based Anti Money Laundering 8.0.8 Fedoraproject Fedora 36 Oracle Financial Services Analytical Applications Infrastructure 8.1.2.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.1.0 Oracle Application Express Oracle Financial Services Analytical Applications Infrastructure 8.1.2.1 Oracle Financial Services Behavior Detection Platform Oracle Financial Services Analytical Applications Infrastructure Oracle Financial Services Behavior Detection Platform 8.0.8.0 Oracle Financial Services Behavior Detection Platform 8.0.7.0 Fedoraproject Fedora 37

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook