oracle primavera unifier 19.12 vulnerabilities and exploits

(subscribe to this query)

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Platform, Mobile App). Supported versions that are affected are 16.1, 16.2, 17.7-17.12, 18.8 and 19.12; Mobile App: before 20.6. Easily exploitable vulnerability allows low privilege...

Oracle Primavera Unifier 16.1 Oracle Primavera Unifier 16.2 Oracle Primavera Unifier Oracle Primavera Unifier 18.8 Oracle Primavera Unifier 19.12

Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A user defined configset could contain rende...

Apache Solr Oracle Primavera Unifier 16.2 Oracle Primavera Unifier 16.1 Oracle Primavera Unifier 18.8 Oracle Primavera Unifier Oracle Primavera Unifier 19.12

6 Github repositories

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, whic...

Apache Tika Oracle Primavera Unifier 18.8 Oracle Primavera Unifier Oracle Primavera Unifier 19.12 Oracle Primavera Unifier 20.12 Oracle Primavera Unifier 21.12

The BPG parser in versions of Apache Tika prior to 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files.

Apache Tika Oracle Primavera Unifier 18.8 Oracle Primavera Unifier Oracle Primavera Unifier 19.12 Oracle Primavera Unifier 20.12 Oracle Primavera Unifier 21.12

MPXJ up to and including 8.1.3 allows XXE attacks. This affects the GanttProjectReader and PhoenixReader components.

Mpxj Mpxj Oracle Primavera Unifier 16.2 Oracle Primavera Unifier 16.1 Oracle Primavera Unifier 18.8 Oracle Primavera Unifier Oracle Primavera Unifier 19.12 Oracle Primavera Unifier 20.12

common/InputStreamHelper.java in Packwood MPXJ prior to 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations.

Mpxj Mpxj Oracle Primavera Unifier 16.2 Oracle Primavera Unifier 16.1 Oracle Primavera Unifier 18.8 Oracle Primavera Unifier Oracle Primavera Unifier 19.12 Oracle Primavera Unifier 21.12

The OWASP Java HTML Sanitizer prior to 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.

Owasp Java Html Sanitizer Oracle Primavera Unifier 18.8 Oracle Primavera Unifier Oracle Primavera Unifier 19.12 Oracle Primavera Unifier 20.12 Oracle Primavera Unifier 21.12 Oracle Middleware Common Libraries And Tools 12.2.1.4.0 Oracle Middleware Common Libraries And Tools 12.2.1.3.0

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.

Linuxfoundation Dojo Oracle Primavera Unifier 18.8 Oracle Primavera Unifier Oracle Weblogic Server 12.2.1.4.0 Oracle Primavera Unifier 19.12 Oracle Weblogic Server 14.1.1.0.0 Oracle Primavera Unifier 20.12 Oracle Primavera Unifier 21.12 Oracle Communications Policy Management 12.6.0.0.0 Debian Debian Linux 10.0

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache...

Apache Tika 1.24 Oracle Flexcube Private Banking 12.1.0 Oracle Primavera Unifier 16.2 Oracle Flexcube Private Banking 12.0.0 Oracle Primavera Unifier 16.1 Oracle Webcenter Portal 12.2.1.3.0 Oracle Primavera Unifier 18.8 Oracle Primavera Unifier Oracle Primavera Unifier 19.12 Oracle Webcenter Portal 12.2.1.4.0 Oracle Communications Messaging Server 8.1

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.

Apache Tika Oracle Webcenter Portal 12.2.1.3.0 Oracle Primavera Unifier 18.8 Oracle Primavera Unifier Oracle Primavera Unifier 19.12 Oracle Webcenter Portal 12.2.1.4.0 Oracle Healthcare Foundation 7.3.0 Oracle Primavera Unifier 20.12 Oracle Communications Messaging Server 8.1 Oracle Healthcare Foundation 8.0.0 Oracle Healthcare Foundation 8.1.0

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook