oracle communications policy management 12.6.0.0.0 vulnerabilities and exploits

(subscribe to this query)

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.

Linuxfoundation Dojo Oracle Communications Policy Management 12.6.0.0.0 Oracle Primavera Unifier Oracle Primavera Unifier 18.8 Oracle Primavera Unifier 19.12 Oracle Primavera Unifier 20.12 Oracle Primavera Unifier 21.12 Oracle Weblogic Server 12.2.1.4.0 Oracle Weblogic Server 14.1.1.0.0 Debian Debian Linux 10.0

NSS (Network Security Services) versions before 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be impacted. A...

Mozilla Nss Mozilla Nss Esr Netapp Cloud Backup -Netapp E-series Santricity Os Controller Oracle Communications Cloud Native Core Binding Support Function 1.11.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.1 Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0 Oracle Communications Policy Management 12.6.0.0.0 Starwindsoftware Starwind San & Nas V8r13 Starwindsoftware Starwind Virtual San V8r13

XStream is an open source java library to serialize objects to XML and back again. Versions before 1.4.19 may allow a remote malicious user to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of servic...

Xstream Project Xstream Fedoraproject Fedora 34 Fedoraproject Fedora 35 Debian Debian Linux 9.0 Oracle Commerce Guided Search 11.3.2 Oracle Communications Brm - Elastic Charging Engine Oracle Communications Brm - Elastic Charging Engine 12.0.0.5.0 Oracle Communications Cloud Native Core Automated Test Suite 1.9.0 Oracle Communications Diameter Intelligence Hub Oracle Communications Policy Management 12.6.0.0.0 Oracle Flexcube Private Banking 12.1.0 Oracle Retail Xstore Point Of Service 16.0.6

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

Vmware Spring Cloud Function Oracle Banking Branch 14.5 Oracle Banking Cash Management 14.5 Oracle Banking Corporate Lending Process Management 14.5 Oracle Banking Credit Facilities Process Management 14.5 Oracle Banking Electronic Data Exchange For Corporates 14.5 Oracle Banking Liquidity Management 14.2 Oracle Banking Liquidity Management 14.5 Oracle Banking Origination 14.5 Oracle Banking Supply Chain Finance 14.5 Oracle Banking Trade Finance Process Management 14.5 Oracle Banking Virtual Account Management 14.5

43 Github repositories3 Articles

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....

Vmware Spring Framework Cisco Cx Cloud Agent Oracle Communications Cloud Native Core Automated Test Suite 1.9.0 Oracle Communications Cloud Native Core Automated Test Suite 22.1.0 Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Console 22.1.0 Oracle Communications Cloud Native Core Network Exposure Function 22.1.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.0 Oracle Communications Cloud Native Core Network Repository Function 22.1.0 Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0

131 Github repositories7 Articles

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_ce...

Openssl Openssl Debian Debian Linux 9.0 Debian Debian Linux 10.0 Freebsd Freebsd 12.2 Netapp Active Iq Unified Manager -Netapp Cloud Volumes Ontap Mediator -Netapp E-series Performance Analyzer -Netapp Oncommand Insight -Netapp Oncommand Workflow Automation -Netapp Ontap Select Deploy Administration Utility -Netapp Santricity Smi-s Provider -Netapp Snapcenter -

4 Github repositories1 Article

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook