oracle primavera unifier 18.8 vulnerabilities and exploits

(subscribe to this query)

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.

Netapp Service Level Manager -Debian Debian Linux 9.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Primavera Unifier 17.2 Oracle Application Testing Suite 13.3.0.1 Oracle Primavera Unifier 18.8 Oracle Primavera Unifier Oracle Agile Plm 9.3.6 Oracle Communications Policy Management 12.5.0 Oracle Primavera Unifier 19.12 Oracle Webcenter Portal 12.2.1.4.0 Oracle Communications Billing And Revenue Management 12.0.0.3.0 Oracle Communications Billing And Revenue Management 7.5.0.23.0 Oracle Communications Services Gatekeeper 7.0 Oracle Retail Merchandising System 15.0.3 Oracle Communications Evolved Communications Application Server 7.1 Oracle Goldengate Application Adapters 19.1.0.0.0 Oracle Data Integrator 12.2.1.4.0 Oracle Primavera Unifier 20.12 Oracle Banking Virtual Account Management 14.3.0 Oracle Insurance Rules Palette 11.0.2 Oracle Commerce Platform

1 Github repository

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.

When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar pack...

A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor t...

Apache Axis 1.4 Oracle Agile Product Lifecycle Management Framework 9.3.3 Oracle Flexcube Private Banking 12.1.0 Oracle Primavera Unifier 16.2 Oracle Peoplesoft Enterprise Human Capital Management Human Resources 9.2 Oracle Retail Xstore Point Of Service 7.1 Oracle Enterprise Manager Base Platform 12.1.0.5 Oracle Flexcube Private Banking 12.0.0 Oracle Primavera Unifier 16.1 Oracle Peoplesoft Enterprise Peopletools 8.56 Oracle Hospitality Guest Access 4.2.0 Oracle Hospitality Guest Access 4.2.1 Oracle Tuxedo 12.1.3 Oracle Internet Directory 12.2.1.3.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Communications Order And Service Management 7.3.0.0.0 Oracle Flexcube Core Banking 11.7.0 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Application Testing Suite 13.2.0.1 Oracle Application Testing Suite 13.3.0.1 Oracle Secure Global Desktop 5.4 Oracle Retail Order Broker 15.0

1 EDB exploit2 Github repositories

Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.

Apache Axis Oracle Agile Product Lifecycle Management Framework 9.3.3 Oracle Flexcube Private Banking 12.1.0 Oracle Primavera Unifier 16.2 Oracle Peoplesoft Enterprise Human Capital Management Human Resources 9.2 Oracle Retail Xstore Point Of Service 7.1 Oracle Enterprise Manager Base Platform 12.1.0.5 Oracle Flexcube Private Banking 12.0.0 Oracle Primavera Unifier 16.1 Oracle Peoplesoft Enterprise Peopletools 8.56 Oracle Hospitality Guest Access 4.2.0 Oracle Hospitality Guest Access 4.2.1 Oracle Tuxedo 12.1.3 Oracle Internet Directory 12.2.1.3.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Communications Order And Service Management 7.3.0.0.0 Oracle Flexcube Core Banking 11.7.0 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Application Testing Suite 13.2.0.1 Oracle Application Testing Suite 13.3.0.1 Oracle Secure Global Desktop 5.4 Oracle Retail Order Broker 15.0

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS.

1 Github repository

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.

1 Github repository

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.

1 Github repository

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.

« PREV 1 2 3 4 5 6 7 8 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook