Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle nosql database vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2

CVE-2018-1000873

Fasterxml Jackson version prior to 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The victim deserializes malicious input, specifically very la...
Fasterxml Jackson-modules-java8Oracle Clusterware 12.1.0.2.0Oracle Database Server 12.1.0.2Oracle Database Server 12.2.0.1Oracle Database Server 18cOracle Database Server 19cOracle Global Lifecycle Management OpatchOracle Nosql DatabaseNetapp Active Iq Unified Manager
5
CVSSv2

CVE-2018-1320

Apache Thrift Java client library versions 0.5.0 up to and including 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in...
Apache ThriftDebian Debian Linux 8.0F5 Traffix Signaling Delivery ControllerOracle Global Lifecycle Management OpatchOracle Nosql Database
7.8
CVSSv2

CVE-2021-22883

Node.js prior to 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the sys...
Nodejs Node.jsFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Netapp E-series Performance Analyzer -Oracle Graalvm 19.3.5Oracle Graalvm 20.3.1.2Oracle Graalvm 21.0.0.2Oracle Jd Edwards Enterpriseone ToolsOracle Mysql ClusterOracle Nosql DatabaseOracle Peoplesoft Enterprise Peopletools 8.58
5
CVSSv2

CVE-2020-11612

The ZlibDecoders in Netty 4.1.x prior to 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder.
Netty NettyDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 33Netapp Oncommand Api Services -Netapp Oncommand Insight -Netapp Oncommand Workflow Automation -Oracle Communications Brm - Elastic Charging Engine 12.0.0.3Oracle Communications Cloud Native Core Service Communication Proxy 1.5.2Oracle Communications Design Studio 7.4.2Oracle Nosql DatabaseOracle Siebel Core - Server Framework
5.1
CVSSv2

CVE-2021-22884

Node.js prior to 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6”. When “localhost6” is not present in /etc/hosts, it is just an ordinary domain that is resolved via DNS, i.e., over networ...
Nodejs Node.jsFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Netapp Active Iq Unified Manager -Netapp E-series Performance Analyzer -Netapp Oncommand Insight -Netapp Oncommand Workflow Automation -Netapp Snapcenter -Oracle Graalvm 19.3.5Oracle Graalvm 20.3.1.2Oracle Graalvm 21.0.0.2
2.1
CVSSv2

CVE-2020-8908

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on unix-like systems, the ...
Google GuavaQuarkus QuarkusOracle Commerce Guided Search 11.3.2Oracle Communications Cloud Native Core Network Slice Selection Function 1.2.1Oracle Communications Pricing Design Center 12.0.0.4.0Oracle Communications Pricing Design Center 12.0.0.5.0Oracle Data Integrator 12.2.1.3.0Oracle Data Integrator 12.2.1.4.0Oracle Nosql DatabaseOracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59
1.9
CVSSv2

CVE-2021-21290

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp fi...
Netty NettyDebian Debian Linux 9.0Debian Debian Linux 10.0Quarkus QuarkusOracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Trade Finance Process Management 14.2.0Oracle Banking Trade Finance Process Management 14.3.0
5
CVSSv2

CVE-2020-13956

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.
Apache HttpclientQuarkus QuarkusOracle Data Integrator 12.2.1.3.0Oracle Data Integrator 12.2.1.4.0Oracle Jd Edwards Enterpriseone OrchestratorOracle Jd Edwards Enterpriseone ToolsOracle Nosql DatabaseOracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Pt Peopletools 8.57Oracle Peoplesoft Enterprise Pt Peopletools 8.58Oracle Peoplesoft Enterprise Pt Peopletools 8.59
7.5
CVSSv2

CVE-2018-14718

FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.
Fasterxml Jackson-databindDebian Debian Linux 8.0Debian Debian Linux 9.0Oracle Banking Platform 2.5.0Oracle Banking Platform 2.6.0Oracle Banking Platform 2.6.1Oracle Banking Platform 2.6.2Oracle Business Process Management Suite 12.1.3.0.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Communications Billing And Revenue Management 7.5Oracle Communications Billing And Revenue Management 12.0Oracle Communications Instant Messaging Server 10.0.1.3.0
4.3
CVSSv2

CVE-2021-21409

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.61.Final there is a vulnerability that enables request ...
Netty NettyDebian Debian Linux 10.0Netapp Oncommand Api Services -Netapp Oncommand Workflow Automation -Oracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Trade Finance Process Management 14.2.0Oracle Banking Trade Finance Process Management 14.3.0
Preferred Score:
CVSSv2
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
physicalprivilegeCVE-2025-26475cozystay - hotel booking wordpress themeCVE-2025-1316CVE-2024-27564CVE-2025-29137dellCVE-2025-25589hcl softwareloftoceaninjectCVE-2025-30140
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook