oracle communications cloud native core policy 1.14.0 vulnerabilities and exploits

(subscribe to this query)

The aaugustin websockets library prior to 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.

Websockets Project Websockets Oracle Communications Cloud Native Core Policy 1.14.0 Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.5.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0 Oracle Communications Cloud Native Core Unified Data Repository 1.14.0

In JetBrains Kotlin prior to 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.

Jetbrains Kotlin Oracle Communications Cloud Native Core Network Slice Selection Function 1.2.1 Oracle Communications Cloud Native Core Policy 1.14.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0

Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacker who is able to patch the status (which is considered a privileged operation and...

Kubernetes Kubernetes Oracle Communications Cloud Native Core Network Slice Selection Function 1.2.1 Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0

11 Github repositories1 Article

This affects the package glob-parent prior to 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.

Gulpjs Glob-parent Oracle Communications Cloud Native Core Policy 1.14.0

2 Github repositories

Spring Security versions 5.5.x before 5.5.1, 5.4.x before 5.4.7, 5.3.x before 5.3.10 and 5.2.x before 5.2.11 are susceptible to a Denial-of-Service (DoS) attack via the initiation of the Authorization Request in an OAuth 2.0 Client Web and WebFlux application. A malicious user or...

Vmware Spring Security Oracle Communications Cloud Native Core Policy 1.14.0

MockServer is open source software which enables easy mocking of any system you integrate with via HTTP or HTTPS. An attacker that can trick a victim into visiting a malicious site while running MockServer locally, will be able to run arbitrary code on the MockServer machine. Wit...

Mock-server Mockserver Oracle Communications Cloud Native Core Policy 1.14.0

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.

Apache Hive Apache Thrift Oracle Communications Cloud Native Core Network Slice Selection Function 1.2.1 Oracle Communications Cloud Native Core Policy 1.14.0

This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when the user-provided keys used in the path parameter are arrays.

Set-value Project Set-value Oracle Communications Cloud Native Core Policy 1.14.0

In JUnit4 from version 4.7 and prior to 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories...

Junit Junit4 Debian Debian Linux 9.0 Apache Pluto Oracle Communications Cloud Native Core Policy 1.14.0

4 Github repositories

In the Jakarta Expression Language implementation 3.0.3 and previous versions, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.

Eclipse Jakarta Expression Language Quarkus Quarkus Oracle Communications Cloud Native Core Policy 1.14.0 Oracle Weblogic Server 14.1.1.0.0

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook