oracle enterprise manager ops center 12.4.0.0 vulnerabilities and exploits

(subscribe to this query)

8.2

CVSSv3

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow....

Oracle Data Integrator 12.2.1.3.0 Oracle Data Integrator 12.2.1.4.0 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Workflow

9.1

CVSSv3

In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown....

Apache Http Server Oracle Communications Element Manager 8.0.0 Oracle Communications Element Manager 8.1.0 Oracle Communications Element Manager 8.1.1 Oracle Communications Element Manager 8.2.0 Oracle Enterprise Manager Ops Center 12.3.3 Oracle Enterprise Manager Ops Center 12.4.0 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Http Server 12.2.1.3.0 Oracle Http Server 12.2.1.4.0 Oracle Instantis Enterprisetrack Oracle Retail Xstore Point Of Service 7.17 Github repositories available

5

CVSSv3

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: RAS subsystems). The supported version that is affected is 8.8. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS...

Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Hyperion Infrastructure Technology 11.1.2.4 Oracle Zfs Storage Appliance 8.8

5.9

CVSSv3

Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or...

Python Python Opensuse Leap 15.1 Opensuse Leap 15.2 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Oracle Enterprise Manager Ops Center 12.4.0.01 Github repository available

4.8

CVSSv3

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to...

Oracle Database Server 12.1.0.2 Oracle Database Server 12.2.0.1 Oracle Database Server 18c Oracle Database Server 19c Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Hyperion Infrastructure Technology 11.1.2.4 Oracle Zfs Storage Appliance 8.8

7.5

CVSSv3

An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected...

Python Urllib3 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Instantis Enterprisetrack 17.1 Oracle Instantis Enterprisetrack 17.2 Oracle Instantis Enterprisetrack 17.3 Oracle Zfs Storage Appliance Kit 8.82 Github repositories available

7.5

CVSSv3

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file...

Wireshark Wireshark Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Instantis Enterprisetrack 17.1 Oracle Instantis Enterprisetrack 17.2 Oracle Instantis Enterprisetrack 17.3 Oracle Zfs Storage Appliance Kit 8.8 Debian Debian Linux 10.0 Debian Debian Linux 11.01 Github repository available

5.3

CVSSv3

Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to pass through with no HTTP...

Apache Http Server Fedoraproject Fedora 34 Fedoraproject Fedora 35 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Instantis Enterprisetrack 17.1 Oracle Instantis Enterprisetrack 17.2 Oracle Instantis Enterprisetrack 17.3 Oracle Zfs Storage Appliance Kit 8.83 Github repositories available

9.8

CVSSv3

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This...

Python Python Fedoraproject Fedora 32 Fedoraproject Fedora 33 Netapp Active Iq Unified Manager -Netapp Ontap Select Deploy Administration Utility -Debian Debian Linux 9.0 Oracle Communications Offline Mediation Controller 12.0.0.3.0 Oracle Communications Pricing Design Center 12.0.0.3.0 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Zfs Storage Appliance Kit 8.82 Github repositories available

7.5

CVSSv3

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service...

Apache Http Server Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Instantis Enterprisetrack 17.1 Oracle Instantis Enterprisetrack 17.2 Oracle Instantis Enterprisetrack 17.3 Oracle Zfs Storage Appliance Kit 8.83 Github repositories available

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook