oracle utilities testing accelerator 6.0.0.1.1 vulnerabilities and exploits

(subscribe to this query)

An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify velocity template...

Apache Velocity Engine Apache Wss4j 2.3.1 Debian Debian Linux 9.0 Oracle Banking Deposits And Lines Of Credit Servicing 2.12.0 Oracle Banking Enterprise Default Management Oracle Banking Enterprise Default Management 2.6.2 Oracle Banking Enterprise Default Management 2.7.1 Oracle Banking Enterprise Default Management 2.10.0 Oracle Banking Enterprise Default Management 2.12.0 Oracle Banking Loans Servicing 2.12.0 Oracle Banking Party Management 2.7.0 Oracle Banking Platform

Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ign...

Apache Tomcat Apache Tomee 8.0.6 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Oracle Agile Plm 9.3.6 Oracle Communications Cloud Native Core Policy 1.14.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0 Oracle Communications Diameter Signaling Router Oracle Communications Instant Messaging Server 10.0.1.5.0 Oracle Communications Policy Management 12.5.0 Oracle Communications Pricing Design Center 12.0.0.3.0 Oracle Communications Session Report Manager

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to load and execute arbitrary code from a remote host only by manipulating the processed input stream, if using the version out of the...

Xstream Project Xstream Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0 Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3 Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0 Oracle Communications Cloud Native Core Automated Test Suite 1.9.0

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.

Apache Commons Compress Netapp Active Iq Unified Manager -Netapp Oncommand Insight -Oracle Banking Digital Experience Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 20.1 Oracle Banking Digital Experience 21.1 Oracle Banking Enterprise Default Management 2.7.0 Oracle Banking Party Management 2.7.0 Oracle Banking Payments 14.5 Oracle Banking Trade Finance 14.5 Oracle Banking Treasury Management 14.5

When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz pa...

Apache Commons Compress Netapp Active Iq Unified Manager -Netapp Oncommand Insight -Oracle Banking Digital Experience Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Banking Digital Experience 21.1 Oracle Banking Enterprise Default Management 2.7.0 Oracle Banking Party Management 2.7.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Business Process Management Suite 12.2.1.4.0

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to load and execute arbitrary code from a remote host only by manipulating the processed input stream. A user is only affected if usin...

Xstream Project Xstream Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0 Oracle Commerce Guided Search 11.3.2 Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3 Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of ...

Xstream Project Xstream Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0 Oracle Commerce Guided Search 11.3.2 Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3 Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who follow...

Xstream Project Xstream Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0 Oracle Commerce Guided Search 11.3.2 Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3 Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0

1 Github repository

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the...

Xstream Project Xstream Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0 Oracle Commerce Guided Search 11.3.2 Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3 Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0

1 Metasploit module3 Github repositories2 Articles

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who follow...

Xstream Project Xstream Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0 Oracle Commerce Guided Search 11.3.2 Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3 Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook