oracle communications pricing design center 12.0.0.3.0 vulnerabilities and exploits

(subscribe to this query)

Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications Applications (component: On Premise Install). Supported versions that are affected are 12.0.0.3.0 and 12.0.0.4.0. Easily exploitable vulnerability allows low privileged attacker with...

Oracle Communications Pricing Design Center 12.0.0.3.0 Oracle Communications Pricing Design Center 12.0.0.4.0

A vulnerability in the JNDI Realm of Apache Tomcat allows an malicious user to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0...

Apache Tomcat Oracle Hospitality Cruise Shipboard Property Management System 20.1.0 Oracle Communications Diameter Signaling Router Oracle Communications Pricing Design Center 12.0.0.3.0 Oracle Tekelec Platform Distribution Oracle Communications Cloud Native Core Policy 1.14.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ign...

Directory traversal in Eclipse Mojarra prior to 2.3.14 allows malicious users to read arbitrary files via the loc parameter or con parameter.

Eclipse Mojarra Oracle Solaris Cluster 4.0 Oracle Banking Platform 2.6.2 Oracle Banking Platform 2.7.1 Oracle Banking Platform 2.9.0 Oracle Communications Network Integrity 7.3.6 Oracle Communications Pricing Design Center 12.0.0.3.0 Oracle Banking Platform 2.12.0 Oracle Banking Enterprise Default Management 2.12.0 Oracle Banking Enterprise Default Management 2.10.0 Oracle Retail Merchandising System 19.0.1 Oracle Hyperion Calculation Manager Oracle Time And Labor

The package python/cpython from 0 and prior to 3.6.13, from 3.7.0 and prior to 3.7.10, from 3.8.0 and prior to 3.8.8, from 3.9.0 and prior to 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaki...

Python Python Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 9.0 Netapp Cloud Backup -Netapp Snapcenter -Netapp Ontap Select Deploy Administration Utility -Netapp Inventory Collect Tool -Djangoproject Django Oracle Zfs Storage Appliance 8.8 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Communications Offline Mediation Controller 12.0.0.3.0 Oracle Communications Pricing Design Center 12.0.0.3.0

Python 3.x up to and including 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_para...

Python Python Fedoraproject Fedora 32 Fedoraproject Fedora 33 Netapp Ontap Select Deploy Administration Utility -Netapp Active Iq Unified Manager -Debian Debian Linux 9.0 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Communications Offline Mediation Controller 12.0.0.3.0 Oracle Zfs Storage Appliance Kit 8.8 Oracle Communications Pricing Design Center 12.0.0.3.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.2.0

3 Github repositories

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.

1 Github repository

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS.

1 Github repository

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.

1 Github repository

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook