oracle enterprise manager ops center 12.4.0.0 vulnerabilities and exploits

(subscribe to this query)

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Suc...

Oracle Data Integrator 12.2.1.3.0 Oracle Data Integrator 12.2.1.4.0 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Workflow

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: RAS subsystems). The supported version that is affected is 8.8. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage...

Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Hyperion Infrastructure Technology 11.1.2.4 Oracle Zfs Storage Appliance 8.8

In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown.

Apache Http Server Oracle Communications Element Manager 8.0.0 Oracle Communications Element Manager 8.1.0 Oracle Communications Element Manager 8.1.1 Oracle Communications Element Manager 8.2.0 Oracle Enterprise Manager Ops Center 12.3.3 Oracle Enterprise Manager Ops Center 12.4.0 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Http Server 12.2.1.3.0 Oracle Http Server 12.2.1.4.0 Oracle Instantis Enterprisetrack Oracle Retail Xstore Point Of Service 7.1

Lib/ipaddress.py in Python up to and including 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote malicious user to cause a denial of service if an application is affected by the performance of a dictionary containing ...

Python Python Opensuse Leap 15.1 Opensuse Leap 15.2 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Oracle Enterprise Manager Ops Center 12.4.0.0

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to comp...

Oracle Database Server 12.1.0.2 Oracle Database Server 12.2.0.1 Oracle Database Server 18c Oracle Database Server 19c Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Hyperion Infrastructure Technology 11.1.2.4 Oracle Zfs Storage Appliance 8.8

Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to pass through with no HTTP valid...

Apache Http Server Fedoraproject Fedora 34 Fedoraproject Fedora 35 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Instantis Enterprisetrack 17.1 Oracle Instantis Enterprisetrack 17.2 Oracle Instantis Enterprisetrack 17.3 Oracle Zfs Storage Appliance Kit 8.8

An issue exists in urllib3 prior to 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via ...

Python Urllib3 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Instantis Enterprisetrack 17.1 Oracle Instantis Enterprisetrack 17.2 Oracle Instantis Enterprisetrack 17.3 Oracle Zfs Storage Appliance Kit 8.8

1 Github repository

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file

Wireshark Wireshark Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Instantis Enterprisetrack 17.1 Oracle Instantis Enterprisetrack 17.2 Oracle Instantis Enterprisetrack 17.3 Oracle Zfs Storage Appliance Kit 8.8 Debian Debian Linux 10.0 Debian Debian Linux 11.0

Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service

Apache Http Server Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Instantis Enterprisetrack 17.1 Oracle Instantis Enterprisetrack 17.2 Oracle Instantis Enterprisetrack 17.3 Oracle Zfs Storage Appliance Kit 8.8

Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF'

Apache Http Server Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Instantis Enterprisetrack 17.1 Oracle Instantis Enterprisetrack 17.2 Oracle Instantis Enterprisetrack 17.3 Oracle Zfs Storage Appliance Kit 8.8

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook