oracle hospitality cruise shipboard property management system 20.1.0 vulnerabilities and exploits

(subscribe to this query)

A vulnerability in the JNDI Realm of Apache Tomcat allows an malicious user to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0...

Apache Tomcat Oracle Communications Cloud Native Core Policy 1.14.0 Oracle Communications Diameter Signaling Router Oracle Communications Pricing Design Center 12.0.0.3.0 Oracle Hospitality Cruise Shipboard Property Management System 20.1.0 Oracle Tekelec Platform Distribution Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

Spring Security 5.4.x before 5.4.4, 5.3.x before 5.3.8.RELEASE, 5.2.x before 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programm...

Pivotal Software Spring Security Vmware Spring Security Oracle Communications Element Manager Oracle Communications Interactive Session Recorder 6.3 Oracle Communications Interactive Session Recorder 6.4 Oracle Communications Unified Inventory Management 7.4.1 Oracle Hospitality Cruise Shipboard Property Management System 20.1.0 Oracle Insurance Policy Administration 11.2.0 Oracle Insurance Policy Administration 11.3.0 Oracle Mysql Enterprise Monitor

1 Github repository

The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the c...

Apache Tomcat Apache Tomcat 10.0.0 Apache Tomcat 10.1.0 Netapp Hci -Netapp Management Services For Element Software -Debian Debian Linux 11.0 Oracle Agile Engineering Data Management 6.2.1.0 Oracle Big Data Spatial And Graph Oracle Communications Diameter Signaling Router Oracle Hospitality Cruise Shipboard Property Management System 20.1.0 Oracle Managed File Transfer 12.2.1.3.0 Oracle Managed File Transfer 12.2.1.4.0

Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ign...

Apache Tomcat Apache Tomee 8.0.6 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Oracle Agile Plm 9.3.6 Oracle Communications Cloud Native Core Policy 1.14.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0 Oracle Communications Diameter Signaling Router Oracle Communications Instant Messaging Server 10.0.1.5.0 Oracle Communications Policy Management 12.5.0 Oracle Communications Pricing Design Center 12.0.0.3.0 Oracle Communications Session Report Manager

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Redhat Hibernate Validator Redhat Hibernate Validator 6.1.0 Redhat Fuse 1.0 Redhat Jboss Data Grid -Redhat Jboss Enterprise Application Platform -Redhat Openshift Application Runtimes -Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform 7.2 Redhat Jboss Enterprise Application Platform 7.3 Netapp Active Iq Unified Manager -Netapp Management Services For Element Software And Netapp Hci -Netapp Snapcenter Plug-in -

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook