oracle communications design studio 7.4.2 vulnerabilities and exploits

(subscribe to this query)

<Issue Description> Spring Security OAuth versions 2.5.x before 2.5.2 and older unsupported versions are susceptible to a Denial-of-Service (DoS) attack via the initiation of the Authorization Request in an OAuth 2.0 Client application. A malicious user or attacker can send...

Pivotal Spring Security Oauth Oracle Communications Design Studio 7.4.2

Apache Log4j2 versions 2.0-alpha1 up to and including 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted strin...

74 Github repositories5 Articles

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. Netty prior to version 4.1.71.Final skips control chars when they are present at the beginning / end of the header name. It s...

Netty Netty Quarkus Quarkus Netapp Snapcenter -Netapp Oncommand Workflow Automation -Oracle Banking Platform 2.6.2 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Coherence 12.2.1.4.0 Oracle Coherence 14.1.1.0.0 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0 Oracle Banking Party Management 2.7.0 Oracle Communications Design Studio 7.4.2 Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Communications Cloud Native Core Unified Data Repository 1.15.0 Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0 Oracle Communications Cloud Native Core Binding Support Function 1.11.0 Oracle Helidon 2.4.0 Oracle Helidon 1.4.10 Oracle Communications Instant Messaging Server 8.1 Oracle Banking Deposits And Lines Of Credit Servicing 2.7 Debian Debian Linux 10.0 Debian Debian Linux 11.0

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced N...

Lodash versions before 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.

Lodash Lodash Oracle Primavera Unifier 18.8 Oracle Primavera Unifier Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Primavera Unifier 19.12 Oracle Retail Customer Management And Segmentation Foundation 19.0 Oracle Communications Services Gatekeeper 7.0 Oracle Enterprise Communications Broker 3.2.0 Oracle Primavera Unifier 20.12 Oracle Banking Extensibility Workbench 14.3.0 Oracle Banking Trade Finance Process Management 14.3.0 Oracle Banking Credit Facilities Process Management 14.3.0 Oracle Banking Corporate Lending Process Management 14.3.0 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Primavera Gateway Oracle Communications Session Border Controller 8.4 Oracle Communications Session Border Controller 9.0 Oracle Banking Supply Chain Finance 14.2.0 Oracle Banking Trade Finance Process Management 14.5.0 Oracle Banking Credit Facilities Process Management 14.2.0 Oracle Banking Credit Facilities Process Management 14.5.0 Oracle Banking Corporate Lending Process Management 14.2.0

1 Github repository

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp fi...

Netty Netty Debian Debian Linux 9.0 Debian Debian Linux 10.0 Quarkus Quarkus Oracle Banking Trade Finance Process Management 14.3.0 Oracle Banking Credit Facilities Process Management 14.3.0 Oracle Banking Corporate Lending Process Management 14.3.0 Oracle Nosql Database Oracle Banking Trade Finance Process Management 14.5.0 Oracle Banking Credit Facilities Process Management 14.2.0 Oracle Banking Credit Facilities Process Management 14.5.0 Oracle Banking Corporate Lending Process Management 14.2.0 Oracle Banking Corporate Lending Process Management 14.5.0 Oracle Banking Trade Finance Process Management 14.2.0 Oracle Communications Messaging Server 8.1 Oracle Communications Design Studio 7.4.2 Oracle Communications Brm - Elastic Charging Engine 12.0.0.3 Netapp Snapcenter -Netapp Active Iq Unified Manager -Netapp Cloud Secure Agent -

The ZlibDecoders in Netty 4.1.x prior to 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder.

Netty Netty Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 33 Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Oncommand Api Services -Oracle Webcenter Portal 12.2.1.3.0 Oracle Webcenter Portal 12.2.1.4.0 Oracle Nosql Database Oracle Communications Messaging Server 8.1 Oracle Communications Design Studio 7.4.2 Oracle Communications Brm - Elastic Charging Engine 12.0.0.3 Oracle Communications Cloud Native Core Service Communication Proxy 1.5.2 Oracle Siebel Core - Server Framework

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook