oracle rest data services vulnerabilities and exploits

(subscribe to this query)

Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services (component: General). Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c; Standalone ORDS: before 20.2.1. Easily exploitable vulnerability allows low privileged att...

Oracle Rest Data Services Oracle Rest Data Services 11.2.0.4 Oracle Rest Data Services 12.1.0.2 Oracle Rest Data Services 12.2.0.1 Oracle Rest Data Services 18c Oracle Rest Data Services 19c

Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services (component: General). Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c; Standalone ORDS: before 20.2.1. Easily exploitable vulnerability allows low privileged att...

Oracle Rest Data Services Oracle Rest Data Services 11.2.0.4 Oracle Rest Data Services 12.1.0.2 Oracle Rest Data Services 12.2.0.1 Oracle Rest Data Services 18c Oracle Rest Data Services 19c

Jetty up to and including 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote malicious users to obtain access by observing elapsed times before rejection of incorrect passwords.

Eclipse Jetty Debian Debian Linux 9.0 Oracle Communications Cloud Native Core Policy 1.5.0 Oracle Enterprise Manager Base Platform 13.2 Oracle Enterprise Manager Base Platform 13.3 Oracle Hospitality Guest Access 4.2.0 Oracle Hospitality Guest Access 4.2.1 Oracle Rest Data Services 11.2.0.4 Oracle Rest Data Services 12.1.0.2 Oracle Rest Data Services 12.2.0.1 Oracle Rest Data Services 18c Oracle Retail Xstore Point Of Service 7.1

SheetJS and SheetJS Pro up to and including 0.16.9 allows malicious users to cause a denial of service (CPU consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js.

Sheetjs Sheetjs Sheetjs Sheetjs Pro Oracle Rest Data Services

SheetJS and SheetJS Pro up to and including 0.16.9 allows malicious users to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 1 of 2).

Sheetjs Project Sheetjs Sheetjs Project Sheetjs Pro Oracle Rest Data Services

SheetJS and SheetJS Pro up to and including 0.16.9 allows malicious users to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 2 of 2).

Sheetjs Project Sheetjs Sheetjs Project Sheetjs Pro Oracle Rest Data Services

In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size coul...

Eclipse Jetty Debian Debian Linux 9.0 Netapp E-series Santricity Management -Netapp E-series Santricity Os Controller Netapp E-series Santricity Web Services -Netapp Element Software -Netapp Element Software Management Node -Netapp Hci Storage Nodes -Netapp Oncommand System Manager 3.x Netapp Oncommand Unified Manager Netapp Santricity Cloud Connector -Netapp Snap Creator Framework

In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the ...

Eclipse Jetty Debian Debian Linux 9.0 Oracle Rest Data Services 11.2.0.4 Oracle Rest Data Services 12.1.0.2 Oracle Rest Data Services 12.2.0.1 Oracle Rest Data Services 18c Oracle Retail Xstore Payment 3.3 Oracle Retail Xstore Point Of Service 7.1 Oracle Retail Xstore Point Of Service 15.0 Oracle Retail Xstore Point Of Service 16.0 Oracle Retail Xstore Point Of Service 17.0 Hp Xp P9000 Command View

1 Article

Spring Data Commons, versions before 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted r...

Pivotal Software Spring Data Commons Pivotal Software Spring Data Rest Apache Ignite Apache Ignite 1.0.0 Oracle Financial Services Crime And Compliance Management Studio 8.0.8.2.0 Oracle Financial Services Crime And Compliance Management Studio 8.0.8.3.0

4 Github repositories

In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information revea...

Eclipse Jetty 9.2.27 Eclipse Jetty 9.3.26 Eclipse Jetty 9.4.16 Netapp Oncommand System Manager Netapp Snap Creator Framework -Netapp Snapcenter -Netapp Snapmanager -Netapp Storage Replication Adapter For Clustered Data Ontap Netapp Storage Replication Adapter For Clustered Data Ontap 9.6 Netapp Storage Services Connector -Netapp Vasa Provider For Clustered Data Ontap Netapp Vasa Provider For Clustered Data Ontap -

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook