oracle communications billing and revenue management vulnerabilities and exploits

(subscribe to this query)

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to request data from internal resources that are not publicly available only by manipulating the processed input stream with a Java ru...

Xstream Project Xstream Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0 Oracle Commerce Guided Search 11.3.2 Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3 Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0

1 Github repository

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who follow...

Xstream Project Xstream Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0 Oracle Commerce Guided Search 11.3.2 Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3 Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to request data from internal resources that are not publicly available only by manipulating the processed input stream with a Java ru...

Xstream Project Xstream Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0 Oracle Commerce Guided Search 11.3.2 Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3 Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0

1 Github repository

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who follow...

Xstream Project Xstream Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0 Oracle Commerce Guided Search 11.3.2 Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3 Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0

curl 7.41.0 up to and including 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.

Haxx Libcurl Fedoraproject Fedora 32 Fedoraproject Fedora 33 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Netapp Clustered Data Ontap -Netapp Hci Management Node -Netapp Solidfire -Netapp Hci Bootstrap Os -Netapp Hci Storage Node Firmware -Apple Mac Os X Apple Mac Os X 10.14.6

1 Github repository

Prototype pollution attack when using _.zipObjectDeep in lodash prior to 4.17.20.

Lodash Lodash Oracle Banking Corporate Lending Process Management 14.2.0 Oracle Banking Corporate Lending Process Management 14.3.0 Oracle Banking Corporate Lending Process Management 14.5.0 Oracle Banking Credit Facilities Process Management 14.2.0 Oracle Banking Credit Facilities Process Management 14.3.0 Oracle Banking Credit Facilities Process Management 14.5.0 Oracle Banking Extensibility Workbench 14.2.0 Oracle Banking Extensibility Workbench 14.3.0 Oracle Banking Extensibility Workbench 14.5.0 Oracle Banking Liquidity Management 14.2.0 Oracle Banking Liquidity Management 14.3.0

2 Github repositories

A Polymorphic Typing issue exists in FasterXML jackson-databind 2.0.0 up to and including 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in ...

Fasterxml Jackson-databind Debian Debian Linux 8.0 Redhat Jboss Enterprise Application Platform 7.2 Redhat Jboss Enterprise Application Platform 7.3 Oracle Banking Platform 2.4.0 Oracle Banking Platform 2.4.1 Oracle Banking Platform 2.5.0 Oracle Banking Platform 2.6.0 Oracle Banking Platform 2.6.1 Oracle Banking Platform 2.6.2 Oracle Banking Platform 2.7.0 Oracle Banking Platform 2.7.1

2 Github repositories

A malicious server can use the FTP PASV response to trick curl 7.73.0 and previous versions into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing p...

Haxx Curl Fedoraproject Fedora 32 Fedoraproject Fedora 33 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Netapp Clustered Data Ontap -Netapp Hci Management Node -Netapp Solidfire -Netapp Hci Storage Node -Netapp Hci Bootstrap Os -Apple Mac Os X Apple Mac Os X 10.14.6

2 Github repositories

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.

Haxx Libcurl Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 32 Fedoraproject Fedora 33 Netapp Clustered Data Ontap -Netapp Hci Management Node -Netapp Solidfire -Netapp Hci Bootstrap Os -Netapp Hci Storage Node Firmware -Apple Mac Os X Apple Mac Os X 10.14.6

FasterXML jackson-databind 2.x prior to 2.9.10.2 lacks certain net.sf.ehcache blocking.

Fasterxml Jackson-databind Oracle Banking Platform Oracle Communications Billing And Revenue Management 7.5.0.23.0 Oracle Communications Billing And Revenue Management 12.0.0.3.0 Oracle Communications Cloud Native Core Network Slice Selection Function 1.2.1 Oracle Communications Contacts Server 8.0.0.4.0 Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Instant Messaging Server 10.0.1.4.0 Oracle Communications Network Charging And Control Oracle Communications Network Charging And Control 6.0.1 Oracle Customer Management And Segmentation Foundation 18.0 Oracle Enterprise Manager Base Platform 13.3.0.0

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook