oracle communications cloud native core service communication proxy 1.15.0 vulnerabilities and exploits

(subscribe to this query)

In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries. This is a follow-up to CVE-2021-22096 that protects against additional types of inpu...

Vmware Spring Framework Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0

1 Github repository

Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacker who is able to patch the status (which is considered a privileged operation and...

Kubernetes Kubernetes Oracle Communications Cloud Native Core Network Slice Selection Function 1.2.1 Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0

11 Github repositories1 Article

Libgcrypt prior to 1.8.8 and 1.9.x prior to 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.

Gnupg Libgcrypt Debian Debian Linux 9.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Oracle Communications Cloud Native Core Binding Support Function 1.11.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.9.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Network Repository Function 1.14.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.1 Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0

1 Github repository

curl 7.7 up to and including 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, l...

Haxx Curl Debian Debian Linux 9.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Oracle Communications Cloud Native Core Binding Support Function 1.11.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.1 Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0 Oracle Essbase Oracle Mysql Server

In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries.

Vmware Spring Framework Netapp Active Iq Unified Manager -Netapp Management Services For Element Software And Netapp Hci -Netapp Metrocluster Tiebreaker -Netapp Snap Creator Framework -Netapp Snapcenter -Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0

1 Github repository

In spring cloud gateway versions before 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote ex...

Vmware Spring Cloud Gateway Vmware Spring Cloud Gateway 3.1.0 Oracle Commerce Guided Search 11.3.2 Oracle Communications Cloud Native Core Binding Support Function 1.11.0 Oracle Communications Cloud Native Core Binding Support Function 22.1.3 Oracle Communications Cloud Native Core Console 22.2.0 Oracle Communications Cloud Native Core Network Exposure Function 22.1.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.1 Oracle Communications Cloud Native Core Network Repository Function 22.1.2 Oracle Communications Cloud Native Core Network Repository Function 22.2.0

62 Github repositories2 Articles

curl 7.61.0 up to and including 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library. The selected cipher set was stored in a single "static" variable...

Haxx Curl Oracle Communications Cloud Native Core Binding Support Function 1.11.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.1 Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0 Oracle Essbase Oracle Mysql Server Netapp Cloud Backup -Netapp Solidfire, Enterprise Sds & Hci Storage Node -Netapp Solidfire & Hci Management Node -

A vulnerability exists in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the malicious user to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 up to and including 3.8.1.Final.

Redhat Xnio Redhat Xnio 3.6.0 Redhat Jboss Brms 5 Redhat Jboss Brms 6 Redhat Jboss Data Grid 6.0.0 Redhat Jboss Data Grid 7.0.0 Redhat Jboss Data Virtualization 6.0.0 Redhat Jboss Enterprise Application Platform 5.0.0 Redhat Jboss Enterprise Application Platform 6.0.0 Redhat Jboss Fuse 6.0.0 Redhat Jboss Fuse 7.0.0 Redhat Jboss Operations Network 3.0

A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be byp...

Haxx Curl Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Fedoraproject Fedora 33 Fedoraproject Fedora 35 Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp Oncommand Insight -Netapp Oncommand Workflow Automation -Netapp Snapcenter -Netapp H300s Firmware -

When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches. curl would then upgrade to TLS but not flush the in-queue of ca...

Haxx Curl Fedoraproject Fedora 33 Fedoraproject Fedora 35 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -

1 Article

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook