oracle big data spatial and graph vulnerabilities and exploits

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code execution. An attacker ...

Opencv Opencv Oracle Application Testing Suite 13.3.0.1 Oracle Big Data Spatial And Graph Oracle Enterprise Manager Base Platform 13.4.0.0

1 Github repository

8.8

CVSSv3

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An attacker can provide a speci...

Opencv Opencv 4.1.0 Oracle Application Testing Suite 13.3.0.1 Oracle Big Data Spatial And Graph Oracle Enterprise Manager Base Platform 13.4.0.0

1 Github repository

7.5

CVSSv3

A vulnerability in Apache Tomcat allows an malicious user to remotely trigger a denial of service. An error introduced as part of a change to improve error handling during non-blocking I/O meant that the error flag associated with the Request object was not reset between requests...

Apache Tomcat 8.5.64 Apache Tomcat 9.0.44 Apache Tomcat 10.0.3 Apache Tomcat 10.0.4 Mcafee Epolicy Orchestrator Mcafee Epolicy Orchestrator 5.10.0 Oracle Big Data Spatial And Graph

6.1

CVSSv3

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option...

Jqueryui Jquery Ui Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -

6.1

CVSSv3

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text...

1 Github repository

6.1

CVSSv3

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altFi...

Jqueryui Jquery Ui Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp H410c Firmware -

1 Github repository

7.5

CVSSv3

The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the c...

Apache Tomcat Apache Tomcat 10.0.0 Apache Tomcat 10.1.0 Netapp Hci -Netapp Management Services For Element Software -Debian Debian Linux 11.0 Oracle Agile Engineering Data Management 6.2.1.0 Oracle Big Data Spatial And Graph Oracle Communications Diameter Signaling Router Oracle Hospitality Cruise Shipboard Property Management System 20.1.0 Oracle Managed File Transfer 12.2.1.3.0 Oracle Managed File Transfer 12.2.1.4.0

7.5

CVSSv3

jackson-databind prior to 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.

Fasterxml Jackson-databind Oracle Big Data Spatial And Graph Oracle Coherence 14.1.1.0.0 Oracle Commerce Platform 11.3.0 Oracle Commerce Platform 11.3.1 Oracle Commerce Platform 11.3.2 Oracle Communications Billing And Revenue Management Oracle Communications Cloud Native Core Binding Support Function 22.1.3 Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Network Repository Function 22.1.2 Oracle Communications Cloud Native Core Network Repository Function 22.2.0 Oracle Communications Cloud Native Core Network Slice Selection Function 22.1.0

4 Github repositories

8.3

CVSSv3

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced N...

Oracle Advanced Networking Option 12.1.0.2 Oracle Advanced Networking Option 12.2.0.1 Oracle Advanced Networking Option 19c Oracle Agile Engineering Data Management 6.2.1.0 Oracle Agile Plm 9.3.6 Oracle Agile Product Lifecycle Management For Process 6.2.2.0 Oracle Agile Product Lifecycle Management For Process 6.2.3.0 Oracle Airlines Data Model 12.1.1.0.0 Oracle Airlines Data Model 12.2.0.1.0 Oracle Application Performance Management 13.4.1.0 Oracle Application Performance Management 13.5.1.0 Oracle Application Testing Suite 13.3.0.1

6.1

CVSSv3

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Redhat Hibernate Validator Redhat Hibernate Validator 6.1.0 Redhat Fuse 1.0 Redhat Jboss Data Grid -Redhat Jboss Enterprise Application Platform -Redhat Openshift Application Runtimes -Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform 7.2 Redhat Jboss Enterprise Application Platform 7.3 Netapp Active Iq Unified Manager -Netapp Management Services For Element Software And Netapp Hci -Netapp Snapcenter Plug-in -

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

oracle big data spatial and graph vulnerabilities and exploits

CVE-2019-5064

CVE-2019-5063

CVE-2021-30639

CVE-2021-41184

CVE-2021-41183

CVE-2021-41182

CVE-2021-42340

CVE-2020-36518

CVE-2021-2351

CVE-2019-10219

Vulmon Search

About

Products

Connect