oracle communications cloud native core network function cloud native environment 1.10.0 vulnerabilities and exploits

(subscribe to this query)

A vulnerability exists in the PyYAML library in versions prior to 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted inp...

Pyyaml Pyyaml Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0

4 Github repositories

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip...

Pypa Pip Oracle Agile Plm 9.3.6 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0 Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Communications Cloud Native Core Policy 22.1.3

1 Github repository

The pip package prior to 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in...

Pypa Pip Opensuse Leap 15.1 Opensuse Leap 15.2 Debian Debian Linux 9.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0 Oracle Communications Cloud Native Core Policy 1.15.0

2 Github repositories

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.

Cryptography.io Cryptography 3.2 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0

Libgcrypt prior to 1.8.8 and 1.9.x prior to 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.

Gnupg Libgcrypt Debian Debian Linux 9.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Oracle Communications Cloud Native Core Binding Support Function 1.11.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.9.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Network Repository Function 1.14.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.1 Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0

1 Github repository

In the cryptography package prior to 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.

Cryptography.io Cryptography Fedoraproject Fedora 33 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0

1 Github repository

Waitress through version 1.3.1 allows request smuggling by sending the Content-Length header twice. Waitress would header fold a double Content-Length header and due to being unable to cast the now comma separated value to an integer would set the Content-Length to 0 internally. ...

Agendaless Waitress Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Debian Debian Linux 9.0

In spring cloud gateway versions before 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote ex...

Vmware Spring Cloud Gateway Vmware Spring Cloud Gateway 3.1.0 Oracle Commerce Guided Search 11.3.2 Oracle Communications Cloud Native Core Binding Support Function 1.11.0 Oracle Communications Cloud Native Core Binding Support Function 22.1.3 Oracle Communications Cloud Native Core Console 22.2.0 Oracle Communications Cloud Native Core Network Exposure Function 22.1.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.1 Oracle Communications Cloud Native Core Network Repository Function 22.1.2 Oracle Communications Cloud Native Core Network Repository Function 22.2.0

62 Github repositories2 Articles

curl 7.7 up to and including 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, l...

Haxx Curl Debian Debian Linux 9.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Oracle Communications Cloud Native Core Binding Support Function 1.11.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.1 Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0 Oracle Essbase Oracle Mysql Server

Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for the start-line and header fields is the sequence CRLF, a recipient MAY recognize a single LF as a line terminator and ignore any preceding CR.&quo...

Agendaless Waitress Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Debian Debian Linux 9.0 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Redhat Openstack 15

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook