Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

tape library acsls vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2019-2729
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...
Oracle Identity Manager 11.1.2.3.0Oracle Weblogic Server 12.1.3.0.0Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Weblogic Server 10.3.6.0.0Oracle Weblogic Server 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Identity Manager 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Rapid Planning 12.1Oracle Communications Diameter Signaling Router 8.2Oracle Communications Diameter Signaling Router 8.2.1Oracle Rapid Planning 12.2Oracle Communications Network IntegrityOracle Hyperion Infrastructure Technology 11.1.2.4Oracle Hyperion Infrastructure Technology 11.2.5.0Oracle Communications Diameter Signaling Router 8.1Oracle Communications Diameter Signaling Router 8.0Oracle Storagetek Tape Analytics Sw Tool 2.3Oracle Tape Library Acsls 8.5
7.5
CVSSv2
CVE-2019-2725
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to com...
Oracle Weblogic Server 12.1.3.0.0Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Weblogic Server 10.3.6.0.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.4Oracle Agile Plm 9.3.5Oracle Vm VirtualboxOracle Communications Converged Application Server 5.1Oracle Communications Converged Application Server 7.0Oracle Communications Converged Application Server 7.1Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Storagetek Tape Analytics Sw Tool 2.3Oracle Tape Library Acsls 8.5Oracle Tape Virtual Storage Manager Gui 6.2Oracle Vm Virtualbox 5.2.36
6.5
CVSSv2
CVE-2018-1258
Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.
Pivotal Software Spring SecurityVmware Spring Framework 5.0.5Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.4Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Application Testing Suite 10.1Oracle Application Testing Suite 12.5.0.3Oracle Application Testing Suite 13.1.0.1Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Big Data Discovery 1.6.0Oracle Communications Converged Application ServerOracle Communications Diameter Signaling RouterOracle Communications Network IntegrityOracle Communications Performance Intelligence CenterOracle Communications Services GatekeeperOracle Endeca Information Discovery Integrator 3.1.0Oracle Endeca Information Discovery Integrator 3.2.0Oracle Enterprise Manager For Mysql Database 13.2Oracle Enterprise Manager Ops Center 12.2.2Oracle Enterprise Manager Ops Center 12.3.3
5
CVSSv2
CVE-2018-15756
Spring Framework, version 5.1, versions 5.0.x before 5.0.10, versions 4.3.x before 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annota...
Vmware Spring FrameworkVmware Spring Framework 5.1.0Oracle Flexcube Private Banking 12.1.0Oracle Insurance Policy Administration J2ee 10.2.0Oracle Retail Xstore Point Of Service 7.1Oracle Weblogic Server 12.1.3.0.0Oracle Retail Invoice Matching 13.0Oracle Flexcube Private Banking 12.0.1Oracle Primavera Gateway 16.2Oracle Primavera Gateway 15.2Oracle Retail Invoice Matching 12.0Oracle Flexcube Private Banking 12.0.3Oracle Insurance Rules Palette 10.2.0Oracle Retail Service Backbone 15.0Oracle Retail Integration Bus 15.0Oracle Weblogic Server 10.3.6.0.0Oracle Weblogic Server 12.2.1.3.0Oracle Communications Unified Inventory Management 7.3Oracle Enterprise Manager Ops Center 12.3.3Oracle Webcenter Sites 12.2.1.3.0Oracle Endeca Information Discovery Integrator 3.2.0Oracle Insurance Rules Palette 10.0
4.3
CVSSv2
CVE-2020-11023
In jQuery versions greater than or equal to 1.0.3 and prior to 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted c...
Jquery JqueryDebian Debian Linux 9.0Fedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Drupal DrupalOracle Weblogic Server 12.1.3.0.0Oracle Hyperion Financial Reporting 11.1.2.4Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Sites 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Communications Operations Monitor 3.4Oracle Weblogic Server 12.2.1.4.0Oracle Webcenter Sites 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Communications Interactive Session RecorderOracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Application ExpressOracle Rest Data Services 12.2.0.1Oracle Rest Data Services 12.1.0.2
4.3
CVSSv2
CVE-2019-11358
jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Jquery JqueryDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Drupal DrupalBackdropcms BackdropFedoraproject Fedora 28Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 15.1Opensuse Backports Sle 15.0Netapp Snapcenter -Netapp Oncommand System ManagerRedhat Cloudforms 4.7Redhat Virtualization Manager 4.3Oracle Service Bus 12.1.3.0.0Oracle Primavera Unifier 16.2Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Weblogic Server 12.1.3.0.0Oracle Service Bus 11.1.1.9.0Oracle Jdeveloper 11.1.1.9.0Oracle Primavera Unifier 16.1
4.3
CVSSv2
CVE-2018-1271
Spring Framework, versions 5.0 before 5.0.5 and versions 4.3 before 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on Windows (as opposed to th...
Vmware Spring FrameworkOracle Retail Xstore Point Of Service 7.1Oracle Enterprise Manager Ops Center 12.2.2Oracle Primavera Gateway 16.2Oracle Primavera Gateway 15.2Oracle Application Testing Suite 12.5.0.3Oracle Retail Back Office 14.1Oracle Retail Back Office 14.0Oracle Enterprise Manager Ops Center 12.3.3Oracle Retail Open Commerce Platform 6.0.1Oracle Application Testing Suite 13.1.0.1Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Communications Diameter Signaling RouterOracle Communications Performance Intelligence CenterOracle Communications Services GatekeeperOracle Health Sciences Information Manager 3.0Oracle Healthcare Master Person Index 3.0Oracle Healthcare Master Person Index 4.0Oracle Insurance Calculation Engine 10.2Oracle Insurance Rules Palette 10.0Oracle Insurance Rules Palette 10.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook