oracle communications brm - elastic charging engine 12.0.0.5.0 vulnerabilities and exploits

(subscribe to this query)

XStream is an open source java library to serialize objects to XML and back again. Versions before 1.4.19 may allow a remote malicious user to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of servic...

Xstream Project Xstream Fedoraproject Fedora 34 Fedoraproject Fedora 35 Debian Debian Linux 9.0 Oracle Commerce Guided Search 11.3.2 Oracle Communications Brm - Elastic Charging Engine Oracle Communications Brm - Elastic Charging Engine 12.0.0.5.0 Oracle Communications Cloud Native Core Automated Test Suite 1.9.0 Oracle Communications Diameter Intelligence Hub Oracle Communications Policy Management 12.6.0.0.0 Oracle Flexcube Private Banking 12.1.0 Oracle Retail Xstore Point Of Service 16.0.6

Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher where this vulnera...

Apache Kafka Apache Kafka 2.8.0 Quarkus Quarkus Oracle Communications Brm - Elastic Charging Engine Oracle Communications Brm - Elastic Charging Engine 12.0.0.5.0 Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Financial Services Analytical Applications Infrastructure Oracle Financial Services Behavior Detection Platform Oracle Financial Services Behavior Detection Platform 8.1.1.0 Oracle Financial Services Behavior Detection Platform 8.1.1.1 Oracle Financial Services Behavior Detection Platform 8.1.2.0 Oracle Financial Services Enterprise Case Management 8.0.7.1

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can ...

Netty Netty Oracle Banking Apis Oracle Banking Apis 19.1 Oracle Banking Apis 19.2 Oracle Banking Apis 20.1 Oracle Banking Apis 21.1 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1

Apache Log4j2 versions 2.0-beta7 up to and including 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the tar...

Apache Log4j Apache Log4j 2.0 Oracle Communications Diameter Signaling Router Oracle Communications Interactive Session Recorder 6.3 Oracle Communications Interactive Session Recorder 6.4 Oracle Primavera Gateway Oracle Primavera Gateway 21.12.0 Oracle Primavera P6 Enterprise Project Portfolio Management Oracle Primavera P6 Enterprise Project Portfolio Management 21.12.0.0 Oracle Primavera Unifier 18.8 Oracle Primavera Unifier 19.12 Oracle Primavera Unifier 20.12

25 Github repositories4 Articles

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook