oracle commerce merchandising vulnerabilities and exploits

(subscribe to this query)

Vulnerability in the Oracle Commerce Merchandising component of Oracle Commerce (subcomponent: Asset Manager). The supported version that is affected is 11.2.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Co...

Oracle Commerce Merchandising 11.2.0.3

A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote malicious users to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs.

Ckeditor Ckeditor 4.15.0 Oracle Agile Plm 9.3.5 Oracle Agile Plm 9.3.6 Oracle Application Express Oracle Banking Party Management 2.7.0 Oracle Banking Platform 2.4.0 Oracle Banking Platform 2.7.0 Oracle Banking Platform 2.7.1 Oracle Banking Platform 2.8.0 Oracle Banking Platform 2.9.0 Oracle Commerce Merchandising 11.0.0 Oracle Commerce Merchandising 11.1.0

It was possible to execute a ReDoS-type attack inside CKEditor 4 prior to 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space (in the Autolink plugin).

Ckeditor Ckeditor Oracle Agile Plm 9.3.5 Oracle Agile Plm 9.3.6 Oracle Application Express Oracle Banking Party Management 2.7.0 Oracle Commerce Merchandising Oracle Commerce Merchandising 11.1.0 Oracle Commerce Merchandising 11.2.0 Oracle Financial Services Analytical Applications Infrastructure Oracle Financial Services Analytical Applications Infrastructure 8.1.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.1 Oracle Financial Services Model Management And Governance

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Clipboard](https://ckeditor.com/cke4/addon/clipboard) package. The vulnerability allowed to abuse paste functionality using malformed HTML, which...

Ckeditor Ckeditor Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Oracle Application Express Oracle Banking Party Management 2.7.0 Oracle Commerce Guided Search 11.3.2 Oracle Commerce Merchandising 11.3.2 Oracle Documaker 12.6.3 Oracle Documaker 12.6.4 Oracle Financial Services Analytical Applications Infrastructure Oracle Jd Edwards Enterpriseone Tools

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Fake Objects](https://ckeditor.com/cke4/addon/fakeobjects) package. The vulnerability allowed to inject malformed Fake Objects HTML, which could ...

Ckeditor Ckeditor Debian Debian Linux 9.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Oracle Application Express Oracle Banking Party Management 2.7.0 Oracle Commerce Guided Search 11.3.2 Oracle Commerce Merchandising 11.3.2 Oracle Documaker 12.6.3 Oracle Documaker 12.6.4 Oracle Financial Services Analytical Applications Infrastructure

ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside the undo feature. The vulnerability allows a user to abuse undo functionality using malformed widget HTML, which could re...

Ckeditor Ckeditor Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Oracle Application Express Oracle Banking Party Management 2.7.0 Oracle Commerce Guided Search 11.3.2 Oracle Commerce Merchandising 11.3.2 Oracle Documaker 12.6.3 Oracle Documaker 12.6.4 Oracle Financial Services Analytical Applications Infrastructure Oracle Financial Services Model Management And Governance 8.0.8.0.0

All versions of Apache Santuario - XML Security for Java before 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an malicious user to abuse an XP...

Apache Santuario Xml Security For Java Apache Cxf 3.4.4 Apache Tomee Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Oracle Agile Plm 9.3.6 Oracle Commerce Guided Search 11.3.2 Oracle Commerce Platform 11.3.2 Oracle Communications Diameter Intelligence Hub Oracle Communications Messaging Server 8.1 Oracle Flexcube Private Banking 12.1.0

2 Github repositories

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing ...

Ckeditor Ckeditor Drupal Drupal Oracle Application Express Oracle Commerce Merchandising 11.3.2 Oracle Financial Services Analytical Applications Infrastructure Oracle Financial Services Analytical Applications Infrastructure 8.1.1.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.2.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.2.1 Oracle Financial Services Behavior Detection Platform Oracle Financial Services Behavior Detection Platform 8.0.7.0 Oracle Financial Services Behavior Detection Platform 8.0.8.0 Oracle Financial Services Trade-based Anti Money Laundering 8.0.7

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the `dialog` plugin. The vulnerability allows abuse of a dialog input validator regular expression, which can cause a significant performance drop r...

Ckeditor Ckeditor Drupal Drupal Oracle Application Express Oracle Commerce Merchandising 11.3.2 Oracle Financial Services Analytical Applications Infrastructure Oracle Financial Services Analytical Applications Infrastructure 8.1.1.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.2.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.2.1 Oracle Financial Services Behavior Detection Platform Oracle Financial Services Behavior Detection Platform 8.0.7.0 Oracle Financial Services Behavior Detection Platform 8.0.8.0 Oracle Financial Services Trade-based Anti Money Laundering 8.0.7

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.

Fasterxml Jackson-databind Netapp Cloud Backup -Netapp Service Level Manager -Debian Debian Linux 9.0 Oracle Agile Plm 9.3.6 Oracle Application Testing Suite 13.3.0.1 Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Banking Platform 2.6.2 Oracle Banking Platform 2.7.0 Oracle Banking Platform 2.7.1 Oracle Banking Platform 2.8.0 Oracle Banking Platform 2.9.0

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook