Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
oracle field service vulnerabilities and exploits
(subscribe to this query)
756
VMScore
CVE-2021-35570
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to co...
Oracle Mobile Field Service
538
VMScore
CVE-2020-8554
Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacker who is able to patch the status (which is considered a privileged operation and...
Kubernetes Kubernetes
Oracle Communications Cloud Native Core Network Slice Selection Function 1.2.1
Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0
Oracle Communications Cloud Native Core Policy 1.15.0
14 Github repositories
1 Article
383
VMScore
CVE-2019-17091
faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J prior to 2.3.10 and Mojarra JavaServer Faces prior to 2.2.20, allows Reflected XSS because a client window field is mishandled.
Eclipse Mojarra
Oracle Mojarra Javaserver Faces
Oracle Application Testing Suite 13.2.0.1
Oracle Application Testing Suite 13.3.0.1
Oracle Banking Enterprise Product Manufacturing 2.7.0
Oracle Banking Enterprise Product Manufacturing 2.8.0
Oracle Communications Diameter Signaling Router
Oracle Communications Network Integrity 7.3.5
Oracle Communications Network Integrity 7.3.6
Oracle Communications Unified Inventory Management 7.3.0
Oracle Communications Unified Inventory Management 7.4.0
Oracle Enterprise Data Quality 12.2.1.3.0
Oracle Health Sciences Information Manager 3.0
Oracle Healthcare Data Repository 7.0
Oracle Primavera P6 Enterprise Project Portfolio Management
Oracle Primavera P6 Enterprise Project Portfolio Management 19.12.0.0
Oracle Rapid Planning 12.1
Oracle Rapid Planning 12.2
Oracle Retail Advanced Inventory Planning 15.0
Oracle Retail Advanced Inventory Planning 16.0
Oracle Retail Assortment Planning 16.0.3
Oracle Retail Bulk Data Integration 16.0.3.0
383
VMScore
CVE-2018-1324
A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services t...
Apache Commons Compress
Oracle Weblogic Server 14.1.1.0.0
Oracle Mysql Cluster
1 Github repository
383
VMScore
CVE-2019-2485
Vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite (subcomponent: Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauth...
Oracle E-business Suite 12.2.6
Oracle E-business Suite 12.2.7
Oracle E-business Suite 12.2.8
Oracle E-business Suite 12.1.3
Oracle E-business Suite 12.1.2
Oracle E-business Suite 12.2.4
Oracle E-business Suite 12.1.1
Oracle E-business Suite 12.2.3
Oracle E-business Suite 12.2.5
422
VMScore
CVE-2019-11358
jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Jquery Jquery
Debian Debian Linux 8.0
Debian Debian Linux 9.0
Debian Debian Linux 10.0
Drupal Drupal
Backdropcms Backdrop
Fedoraproject Fedora 28
Fedoraproject Fedora 29
Fedoraproject Fedora 30
Opensuse Leap 15.1
Opensuse Backports Sle 15.0
Netapp Snapcenter -
Netapp Oncommand System Manager
Redhat Cloudforms 4.7
Redhat Virtualization Manager 4.3
Oracle Service Bus 12.1.3.0.0
Oracle Primavera Unifier 16.2
Oracle Jd Edwards Enterpriseone Tools 9.2
Oracle Weblogic Server 12.1.3.0.0
Oracle Service Bus 11.1.1.9.0
Oracle Jdeveloper 11.1.1.9.0
Oracle Primavera Unifier 16.1
130 Github repositories
410
VMScore
CVE-2009-4019
mysqld in MySQL 5.0.x prior to 5.0.88 and 5.1.x prior to 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, ...
Oracle Mysql 5.0.25
Mysql Mysql 5.0.24
Oracle Mysql 5.0.0
Oracle Mysql 5.0.11
Mysql Mysql 5.0.30
Oracle Mysql 5.0.42
Oracle Mysql 5.0.32
Oracle Mysql 5.0.51
Oracle Mysql 5.0.26
Oracle Mysql 5.0.33
Mysql Mysql 5.0.66
Oracle Mysql 5.0.7
Mysql Mysql 5.1.23
Mysql Mysql 5.1.5
Oracle Mysql 5.1.13
Oracle Mysql 5.1.14
Oracle Mysql 5.1.30
Oracle Mysql 5.1
Oracle Mysql 5.1.18
Oracle Mysql 5.1.19
Mysql Mysql 5.0.2
Mysql Mysql 5.0.20
2 EDB exploits
1000
VMScore
CVE-2012-1723
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and previous versions, 6 update 32 and previous versions, 5 update 35 and previous versions, and 1.4.2_37 and previous versions allows remote malicious users to affect confident...
Oracle Jre
Oracle Jdk
Sun Jdk
Sun Jre
1 EDB exploit
2 Github repositories
6 Articles
384
VMScore
CVE-2018-1000873
Fasterxml Jackson version prior to 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The victim deserializes malicious input, specifically very la...
Fasterxml Jackson-modules-java8
Oracle Database Server 12.1.0.2
Oracle Database Server 12.2.0.1
Oracle Database Server 18c
Oracle Database Server 19c
Oracle Clusterware 12.1.0.2.0
Oracle Global Lifecycle Management Opatch
Oracle Nosql Database
Netapp Active Iq Unified Manager
580
VMScore
CVE-2010-1848
Directory traversal vulnerability in MySQL 5.0 up to and including 5.0.91 and 5.1 prior to 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. (d...
Mysql Mysql 5.0.1
Mysql Mysql 5.0.10
Mysql Mysql 5.0.16
Mysql Mysql 5.0.2
Mysql Mysql 5.0.20
Oracle Mysql 5.0.0
Oracle Mysql 5.0.14
Mysql Mysql 5.0.15
Oracle Mysql 5.0.19
Mysql Mysql 5.0.24
Oracle Mysql 5.0.45
Mysql Mysql 5.0.45b
Mysql Mysql 5.0.82
Oracle Mysql 5.0.83
Mysql Mysql 5.0.84
Oracle Mysql 5.0.91
Oracle Mysql 5.0.9
Oracle Mysql 5.0.11
Mysql Mysql 5.0.17
Oracle Mysql 5.0.21
Oracle Mysql 5.0.22
Oracle Mysql 5.0.3
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
privilege escalation
CVE-2024-20696
CVE-2024-29829
CVE-2024-33999
CVE-2024-35646
physical
CVE-2024-24919
CVE-2024-31030
local users
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »