oracle communications cloud native core security edge protection proxy 1.15.0 vulnerabilities and exploits

(subscribe to this query)

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Con...

Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0 Oracle Mysql Connectors Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0 Quarkus Quarkus

3 Github repositories

In spring cloud gateway versions before 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote ex...

Vmware Spring Cloud Gateway 3.1.0 Vmware Spring Cloud Gateway Oracle Commerce Guided Search 11.3.2 Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0 Oracle Communications Cloud Native Core Network Slice Selection Function 22.1.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Network Exposure Function 22.1.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.1 Oracle Communications Cloud Native Core Binding Support Function 1.11.0 Oracle Communications Cloud Native Core Binding Support Function 22.1.3 Oracle Communications Cloud Native Core Network Repository Function 22.2.0 Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.1 Oracle Communications Cloud Native Core Console 22.2.0 Oracle Communications Cloud Native Core Network Repository Function 22.1.2

72 Github repositories2 Articles

When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches. curl would then upgrade to TLS but not flush the in-queue of ca...

2 Github repositories1 Article

A vulnerability exists in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the malicious user to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 up to and including 3.8.1.Final.

Redhat Xnio Redhat Xnio 3.6.0 Redhat Jboss Operations Network 3.0 Redhat Jboss Enterprise Application Platform 6.0.0 Redhat Jboss Fuse 6.0.0 Redhat Jboss Enterprise Application Platform 5.0.0 Redhat Jboss Fuse 7.0.0 Redhat Jboss Data Grid 7.0.0 Redhat Jboss Brms 5 Redhat Jboss Soa Platform 5 Redhat Jboss Brms 6 Redhat Jboss Data Grid 6.0.0 Redhat Jboss Data Virtualization 6.0.0 Oracle Communications Cloud Native Core Network Repository Function 1.14.0 Oracle Communications Cloud Native Core Policy 1.14.0 Oracle Communications Cloud Native Core Unified Data Repository 1.14.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0 Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.15.0 Oracle Communications Cloud Native Core Console 1.9.0

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. Netty prior to version 4.1.71.Final skips control chars when they are present at the beginning / end of the header name. It s...

Netty Netty Quarkus Quarkus Netapp Snapcenter -Netapp Oncommand Workflow Automation -Oracle Banking Platform 2.6.2 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Coherence 12.2.1.4.0 Oracle Coherence 14.1.1.0.0 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0 Oracle Banking Party Management 2.7.0 Oracle Communications Design Studio 7.4.2 Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Communications Cloud Native Core Unified Data Repository 1.15.0 Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0 Oracle Communications Cloud Native Core Binding Support Function 1.11.0 Oracle Helidon 2.4.0 Oracle Helidon 1.4.10 Oracle Communications Instant Messaging Server 8.1 Oracle Banking Deposits And Lines Of Credit Servicing 2.7 Debian Debian Linux 10.0 Debian Debian Linux 11.0

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

Vmware Spring Cloud Function Oracle Sd-wan Edge 9.0 Oracle Retail Xstore Point Of Service 20.0.1 Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0 Oracle Banking Cash Management 14.5 Oracle Banking Trade Finance Process Management 14.5 Oracle Banking Credit Facilities Process Management 14.5 Oracle Banking Corporate Lending Process Management 14.5 Oracle Banking Supply Chain Finance 14.5 Oracle Sd-wan Edge 9.1 Oracle Banking Liquidity Management 14.5 Oracle Banking Liquidity Management 14.2 Oracle Banking Virtual Account Management 14.5 Oracle Financial Services Enterprise Case Management 8.1.1.0 Oracle Financial Services Enterprise Case Management 8.1.1.1 Oracle Financial Services Behavior Detection Platform 8.1.2.0 Oracle Financial Services Behavior Detection Platform 8.1.1.1 Oracle Financial Services Behavior Detection Platform 8.1.1.0 Oracle Mysql Enterprise Monitor Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Communications Communications Policy Management 12.6.0.0.0

57 Github repositories3 Articles

A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be byp...

2 Github repositories

The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....

Vmware Spring Framework Cisco Cx Cloud Agent Oracle Sd-wan Edge 9.0 Oracle Retail Xstore Point Of Service 20.0.1 Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.1 Oracle Sd-wan Edge 9.1 Siemens Siveillance Identity 1.6 Siemens Siveillance Identity 1.5 Siemens Sipass Integrated 2.85 Siemens Sipass Integrated 2.80 Oracle Product Lifecycle Analytics 3.6.1 Oracle Financial Services Enterprise Case Management 8.1.1.0 Oracle Financial Services Enterprise Case Management 8.1.1.1 Oracle Financial Services Behavior Detection Platform 8.1.2.0 Oracle Financial Services Behavior Detection Platform 8.1.1.1 Oracle Financial Services Behavior Detection Platform 8.1.1.0 Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Communications Cloud Native Core Unified Data Repository 1.15.0 Oracle Communications Cloud Native Core Unified Data Repository 22.1.0 Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.0

167 Github repositories7 Articles

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated...

2 Github repositories

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook