retail service backbone vulnerabilities and exploits

(subscribe to this query)

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).

Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j...

18 Github repositories1 Article

An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify velocity template...

Apache Velocity Engine Apache Wss4j 2.3.1 Debian Debian Linux 9.0 Oracle Retail Order Broker 16.0 Oracle Banking Platform 2.6.2 Oracle Banking Platform 2.7.1 Oracle Communications Network Integrity 7.3.6 Oracle Banking Enterprise Default Management 2.12.0 Oracle Banking Enterprise Default Management 2.10.0 Oracle Banking Party Management 2.7.0 Oracle Utilities Testing Accelerator 6.0.0.2.2 Oracle Utilities Testing Accelerator 6.0.0.3.1 Oracle Utilities Testing Accelerator 6.0.0.1.1 Oracle Communications Cloud Native Core Policy 1.14.0 Oracle Banking Platform Oracle Banking Loans Servicing 2.12.0 Oracle Retail Service Backbone 19.0.1 Oracle Retail Integration Bus 19.0.1 Oracle Banking Enterprise Default Management 2.7.1 Oracle Banking Enterprise Default Management 2.6.2 Oracle Banking Enterprise Default Management Oracle Banking Deposits And Lines Of Credit Servicing 2.12.0

1 Github repository

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commons-proxy).

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).

1 Github repository

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).

1 Github repository

Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RSB Kernel.

Oracle Retail Service Backbone 14.1 Oracle Retail Service Backbone 15.0 Oracle Retail Service Backbone 14.0

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook