oracle graalvm 19.3.4 vulnerabilities and exploits

(subscribe to this query)

Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If...

Nodejs Node.js Debian Debian Linux 10.0 Fedoraproject Fedora 32 Fedoraproject Fedora 33 Oracle Graalvm 19.3.4 Oracle Graalvm 20.3.0 Siemens Sinec Infrastructure Network Services

Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields). In this case, Node.js identifies the first header field and ignores the second. This can lead to HTTP Request...

Nodejs Node.js Debian Debian Linux 10.0 Fedoraproject Fedora 32 Fedoraproject Fedora 33 Oracle Graalvm 19.3.4 Oracle Graalvm 20.3.0 Siemens Sinec Infrastructure Network Services4 Github repositories available

A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This...

Nodejs Node.js Fedoraproject Fedora 32 Fedoraproject Fedora 33 Oracle Graalvm 19.3.4 Oracle Graalvm 20.3.0 Oracle Retail Xstore Point Of Service 16.0.6 Oracle Retail Xstore Point Of Service 17.0.4 Oracle Retail Xstore Point Of Service 18.0.3 Oracle Retail Xstore Point Of Service 19.0.2 Oracle Jd Edwards Enterpriseone Tools Oracle Mysql Cluster Oracle Blockchain Platform C-ares Project C-ares8 Github repositories available

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE....

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This...

Openssl Openssl Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 32 Fedoraproject Fedora 33 Oracle Api Gateway 11.1.2.4.0 Oracle Peoplesoft Enterprise Peopletools 8.56 Oracle Business Intelligence 12.2.1.3.0 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Jd Edwards World Security A9.4 Oracle Business Intelligence 12.2.1.4.0 Oracle Enterprise Manager Base Platform 13.3.0.0 Oracle Business Intelligence 5.5.0.0.0 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Enterprise Manager Base Platform 13.4.0.0 Oracle Communications Session Router Cz8.2 Oracle Communications Session Router Cz8.3 Oracle Communications Subscriber-aware Load Balancer Cz8.2 Oracle Communications Subscriber-aware Load Balancer Cz8.3 Oracle Communications Subscriber-aware Load Balancer Cz8.4 Oracle Communications Unified Session Manager Scz8.2.5 Oracle Enterprise Communications Broker Pcz3.1 Oracle Enterprise Communications Broker Pcz3.2 Oracle Enterprise Communications Broker Pcz3.3 Oracle Enterprise Manager For Storage Management 13.4.0.0 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Enterprise Session Border Controller Cz8.2 Oracle Enterprise Session Border Controller Cz8.3 Oracle Enterprise Session Border Controller Cz8.4 Oracle Essbase 21.2 Oracle Graalvm 19.3.4 Oracle Graalvm 20.3.0 Oracle Http Server 12.2.1.4.0 Oracle Jd Edwards Enterpriseone Tools Oracle Mysql Oracle Business Intelligence 5.9.0.0.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Diameter Intelligence Hub Oracle Communications Session Border Controller Cz8.2 Oracle Communications Session Border Controller Cz8.3 Oracle Communications Session Border Controller Cz8.4 Oracle Communications Session Router Cz8.4 Oracle Mysql Server Netapp Santricity Smi-s Provider -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Solidfire -Netapp Hci Management Node -Netapp Hci Storage Node -Netapp Active Iq Unified Manager -Netapp E-series Santricity Os Controller Netapp Manageability Software Development Kit -Netapp Plug-in For Symantec Netbackup -Netapp Hci Compute Node -Netapp Ef600a Firmware -Netapp Aff A250 Firmware -Tenable Log Correlation Engine Tenable Nessus Network Monitor Siemens Sinec Infrastructure Network Services15 Github repositories available4 Articles available

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook