oracle graalvm 19.3.4 vulnerabilities and exploits

(subscribe to this query)

Node.js versions prior to 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If...

Nodejs Node.js Debian Debian Linux 10.0 Fedoraproject Fedora 32 Fedoraproject Fedora 33 Oracle Graalvm 19.3.4 Oracle Graalvm 20.3.0 Siemens Sinec Infrastructure Network Services

Node.js versions prior to 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields). In this case, Node.js identifies the first header field and ignores the second. This can lead to HTTP Request Smug...

Nodejs Node.js Debian Debian Linux 10.0 Fedoraproject Fedora 32 Fedoraproject Fedora 33 Oracle Graalvm 19.3.4 Oracle Graalvm 20.3.0 Siemens Sinec Infrastructure Network Services

1 Github repository

A Node.js application that allows an malicious user to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. ...

Nodejs Node.js Fedoraproject Fedora 32 Fedoraproject Fedora 33 Oracle Graalvm 19.3.4 Oracle Graalvm 20.3.0 Oracle Retail Xstore Point Of Service 16.0.6 Oracle Retail Xstore Point Of Service 17.0.4 Oracle Retail Xstore Point Of Service 18.0.3 Oracle Retail Xstore Point Of Service 19.0.2 Oracle Jd Edwards Enterpriseone Tools Oracle Mysql Cluster Oracle Blockchain Platform C-ares Project C-ares

2 Github repositories

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Succe...

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This functi...

5 Github repositories1 Article

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook