oracle communications cloud native core console 1.9.0 vulnerabilities and exploits

(subscribe to this query)

In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries. This is a follow-up to CVE-2021-22096 that protects against additional types of inpu...

Vmware Spring Framework Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0

1 Github repository

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Con...

Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0 Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0 Oracle Mysql Connectors Quarkus Quarkus

2 Github repositories

A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's pa...

Redhat Resteasy Netapp Oncommand Insight -Quarkus Quarkus Oracle Communications Cloud Native Core Console 1.9.0

An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived objects that cause fre...

Google Google-protobuf Google Protobuf-java Google Protobuf-kotlin Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.1 Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Spatial And Graph Mapviewer 19c Oracle Spatial And Graph Mapviewer 21c

1 Github repository

H2 Console prior to 2.1.210 allows remote malicious users to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

H2database H2 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Oracle Communications Cloud Native Core Console 1.9.0

2 Github repositories

In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries.

Vmware Spring Framework Netapp Active Iq Unified Manager -Netapp Management Services For Element Software And Netapp Hci -Netapp Metrocluster Tiebreaker -Netapp Snap Creator Framework -Netapp Snapcenter -Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0

1 Github repository

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an malicious user to ac...

Hibernate Hibernate Orm Debian Debian Linux 9.0 Debian Debian Linux 10.0 Quarkus Quarkus Oracle Communications Cloud Native Core Console 1.9.0 Oracle Retail Customer Management And Segmentation Foundation 19.0

1 Github repository

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

Vmware Spring Cloud Function Oracle Banking Branch 14.5 Oracle Banking Cash Management 14.5 Oracle Banking Corporate Lending Process Management 14.5 Oracle Banking Credit Facilities Process Management 14.5 Oracle Banking Electronic Data Exchange For Corporates 14.5 Oracle Banking Liquidity Management 14.2 Oracle Banking Liquidity Management 14.5 Oracle Banking Origination 14.5 Oracle Banking Supply Chain Finance 14.5 Oracle Banking Trade Finance Process Management 14.5 Oracle Banking Virtual Account Management 14.5

43 Github repositories3 Articles

A vulnerability exists in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the malicious user to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 up to and including 3.8.1.Final.

Redhat Xnio Redhat Xnio 3.6.0 Redhat Jboss Brms 5 Redhat Jboss Brms 6 Redhat Jboss Data Grid 6.0.0 Redhat Jboss Data Grid 7.0.0 Redhat Jboss Data Virtualization 6.0.0 Redhat Jboss Enterprise Application Platform 5.0.0 Redhat Jboss Enterprise Application Platform 6.0.0 Redhat Jboss Fuse 6.0.0 Redhat Jboss Fuse 7.0.0 Redhat Jboss Operations Network 3.0

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....

Vmware Spring Framework Cisco Cx Cloud Agent Oracle Communications Cloud Native Core Automated Test Suite 1.9.0 Oracle Communications Cloud Native Core Automated Test Suite 22.1.0 Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Console 22.1.0 Oracle Communications Cloud Native Core Network Exposure Function 22.1.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.0 Oracle Communications Cloud Native Core Network Repository Function 22.1.0 Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0

128 Github repositories7 Articles

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook