Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle communications cloud native core binding support function 1.10.0 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv3

CVE-2022-22947

In spring cloud gateway versions before 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote ex...
Vmware Spring Cloud GatewayVmware Spring Cloud Gateway 3.1.0Oracle Commerce Guided Search 11.3.2Oracle Communications Cloud Native Core Binding Support Function 1.11.0Oracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Console 22.2.0Oracle Communications Cloud Native Core Network Exposure Function 22.1.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Network Repository Function 22.1.2Oracle Communications Cloud Native Core Network Repository Function 22.2.0
7.5
CVSSv3

CVE-2021-33560

Libgcrypt prior to 1.8.8 and 1.9.x prior to 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.
Gnupg LibgcryptDebian Debian Linux 9.0Fedoraproject Fedora 33Fedoraproject Fedora 34Oracle Communications Cloud Native Core Binding Support Function 1.11.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.9.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Network Repository Function 1.14.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0
3.1
CVSSv3

CVE-2021-22898

curl 7.7 up to and including 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, l...
Haxx CurlDebian Debian Linux 9.0Fedoraproject Fedora 33Fedoraproject Fedora 34Oracle Communications Cloud Native Core Binding Support Function 1.11.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle EssbaseOracle Mysql Server
7.5
CVSSv3

CVE-2021-22946

A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be byp...
Haxx CurlDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 35Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp Oncommand Insight -Netapp Oncommand Workflow Automation -Netapp Snapcenter -Netapp H300s Firmware -
5.9
CVSSv3

CVE-2021-22947

When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches. curl would then upgrade to TLS but not flush the in-queue of ca...
Haxx CurlFedoraproject Fedora 33Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -
5.3
CVSSv3

CVE-2021-22897

curl 7.61.0 up to and including 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library. The selected cipher set was stored in a single "static" variable...
Haxx CurlOracle Communications Cloud Native Core Binding Support Function 1.11.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle EssbaseOracle Mysql ServerNetapp Cloud Backup -Netapp Solidfire, Enterprise Sds & Hci Storage Node -Netapp Solidfire & Hci Management Node -
8.1
CVSSv3

CVE-2021-22901

curl 7.75.0 up to and including 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote c...
Haxx CurlOracle Communications Cloud Native Core Binding Support Function 1.11.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle EssbaseOracle Mysql ServerNetapp Active Iq Unified Manager -Netapp Cloud Backup -Netapp Oncommand Insight -
5.7
CVSSv3

CVE-2021-3426

There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would ...
Python PythonPython Python 3.10.0Fedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Debian Debian Linux 9.0Redhat Software Collections -Redhat Enterprise Linux 8.0Netapp Cloud Backup -Netapp Ontap Select Deploy Administration Utility -Netapp Snapcenter -Oracle Communications Cloud Native Core Binding Support Function 1.10.0
7.5
CVSSv3

CVE-2021-37136

The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack
Netty NettyQuarkus QuarkusOracle Banking ApisOracle Banking Apis 19.1Oracle Banking Apis 19.2Oracle Banking Apis 20.1Oracle Banking Apis 21.1Oracle Banking Digital Experience 18.1Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 19.2
5.3
CVSSv3

CVE-2021-34429

For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-281...
Eclipse JettyNetapp E-series Santricity Os ControllerNetapp E-series Santricity Web Services -Netapp Element Plug-in For Vcenter Server -Netapp Hci Management Node -Netapp Snap Creator Framework -Netapp Snapcenter Plug-in -Netapp Solidfire -Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Communications Cloud Native Core Binding Support Function 1.10.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.5.0Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
log injectionCVE-2024-42327CVE-2024-53691cameraCVE-2024-53810CVE-2024-41649logic flawCVE-2024-38921CVE-2024-41713
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook