Filter
Redhat Jboss Enterprise Application PlatformInput Validation
9.8
First published (updated )
FasterXML jackson-databindAn issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default ty…
9.8
First published (updated )
Oracle Insurance Rules PaletteCode Injection, Input Validation
9.8
First published (updated )
Oracle Retail Integration BusCode Injection, Input Validation
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache TomcatOS Command Injection, Input Validation
9.8
First published (updated )
Oracle Primavera P6 Enterprise Project Portfolio ManagementFasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leve…
9.8
First published (updated )
Oracle Primavera P6 Enterprise Project Portfolio ManagementFasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leve…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
FasterXML jackson-databindFasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, ca…
9.8
First published (updated )
Pivotal Software Spring BatchSpring Batch XML External Entity Injection (XXE)
9.8
First published (updated )
Oracle Primavera P6 Enterprise Project Portfolio ManagementFasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leve…
9.8
First published (updated )
Redhat Enterprise LinuxFasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by …
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle Financial Services Analytical Applications InfrastructureFasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code b…
9.8
First published (updated )
Oracle Financial Services Analytical Applications InfrastructureFasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code b…
9.8
First published (updated )
IBM Guardium Data EncryptionIBM Guardium Data Encryption (GDE) contains hard-coded credentials, such as a password or cryptograp…
9.8
First published (updated )
Vmware Spring SecurityPivotal Spring Security could allow a remote attacker to execute arbitrary code on the system, cause…
9.8
First published (updated )
Oracle Communications Diameter Signaling RouterLegion of the Bouncy Castle Java Cryptography APIs could allow a remote attacker to execute arbitrar…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
IBM Guardium Data EncryptionIBM Guardium Data Encryption (GDE) could allow a remote authenticated attacker to execute arbitrary …
First published (updated )
Oracle Application Testing SuiteSpring Framework version 5.0.5 when used in combination with any versions of Spring Security contain…
8.8
First published (updated )
IBM Guardium Data EncryptionIBM Guardium Data Encryption (GDE) does not invalidate session after logout which could allow an aut…
8.8
First published (updated )
IBM GDEIBM Guardium Data Encryption (GDE) specifies permissions for a security-critical resource in a way t…
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/momentThe duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cau…
7.8
First published (updated )
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-apiLast updated 24 July 2024
7.5
First published (updated )
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-apiLast updated 24 July 2024
7.5
First published (updated )
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-apiLast updated 2 September 2024
7.5
First published (updated )
Oracle Business Process Management SuiteBouncy Castle could provide weaker than expected security, caused by an error in the Low-level inter…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.