Latest oracle communications diameter signaling router Vulnerabilities

● CVE-2021-44832

Apache Log4j could allow a remote attacker with permission to modify the logging configuration file to execute arbitrary code on the system. By constructing a malicious configuration using a JDBC Appe...

redhat/eap7-log4j<0:2.17.1-1.redhat_00001.1.el8ea

redhat/eap7-log4j<0:2.17.1-1.redhat_00001.1.el7ea

Apache Log4j=2.0-beta9

Apache Log4j=2.15.0

Apache Log4j=2.17.0

Apache Log4j=1.2.x

and 58 more

● CVE-2021-45105

Apache Log4j StrSubstitutor Uncontrolled Recursion Denial-of-Service Vulnerability

redhat/eap7-log4j<0:2.17.1-1.redhat_00001.1.el8ea

redhat/eap7-log4j<0:2.17.1-1.redhat_00001.1.el7ea

redhat/rh-sso7-keycloak<0:15.0.6-1.redhat_00001.1.el7

redhat/rh-sso7-keycloak<0:15.0.6-1.redhat_00001.1.el8

debian/apache-log4j2

debian/apache-log4j2<=2.16.0-1~deb10u1<=2.16.0-1<=2.16.0-1~deb11u1

and 217 more

● CVE-2021-21703

In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running a...

<8.0.12

PHP PHP>=7.3.0<=7.3.31

PHP PHP>=7.4.0<7.4.25

PHP PHP>=8.0.0<8.0.12

Debian Debian Linux=9.0

Debian Debian Linux=10.0

and 8 more

● CVE-2021-42340

Apache Tomcat is vulnerable to a denial of service, caused by a memory leak flaw in WebSocket connections. By sending a specially-crafted request using OutOfMemoryError, a remote attacker could exploi...

redhat/pki-servlet-engine<1:9.0.50-1.el9

redhat/jws5-tomcat<0:9.0.50-3.redhat_00004.1.el7

redhat/jws5-tomcat-native<0:1.2.30-3.redhat_3.el7

redhat/jws5-tomcat-vault<0:1.1.8-4.Final_redhat_00004.1.el7

redhat/jws5-tomcat<0:9.0.50-3.redhat_00004.1.el8

redhat/jws5-tomcat-native<0:1.2.30-3.redhat_3.el8

and 47 more

● CVE-2021-37136

### Impact The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users o...

maven/io.netty:netty<4.0.0

maven/org.jboss.netty:netty<4.0.0

maven/io.netty:netty-codec<4.1.68.Final

Netty Netty<4.1.68

Quarkus Quarkus<2.2.4

Oracle Banking Apis>=18.1<=18.3

and 44 more

● CVE-2021-37137

### Impact The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk ...

redhat/eap7-netty<0:4.1.72-4.Final_redhat_00001.1.el8ea

redhat/eap7-netty<0:4.1.72-4.Final_redhat_00001.1.el7ea

redhat/candlepin<0:4.1.15-1.el8

maven/io.netty:netty<4.0.0

maven/org.jboss.netty:netty<4.0.0

maven/io.netty:netty-codec>=4.0.0<4.1.68.Final

and 61 more

● CVE-2021-34429

For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security co...

redhat/jetty<9.4.43

redhat/jetty<10.0.6

redhat/jetty<11.0.6

Eclipse Jetty>=9.4.37<9.4.43

Eclipse Jetty>=10.0.1<10.0.6

Eclipse Jetty>=11.0.1<11.0.6

and 19 more

● CVE-2021-33037

Apache Tomcat is vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially-crafted HTTP(S) transfer-encoding request header,...

redhat/jws5-tomcat<0:9.0.50-3.redhat_00004.1.el7

redhat/jws5-tomcat-native<0:1.2.30-3.redhat_3.el7

redhat/jws5-tomcat-vault<0:1.1.8-4.Final_redhat_00004.1.el7

redhat/jws5-tomcat<0:9.0.50-3.redhat_00004.1.el8

redhat/jws5-tomcat-native<0:1.2.30-3.redhat_3.el8

redhat/jws5-tomcat-vault<0:1.1.8-4.Final_redhat_00004.1.el8

and 91 more

● CVE-2021-30640

Apache Tomcat could allow a remote attacker to bypass security restrictions, caused by improper authentication validation in the JNDI Realm. By sending a specially-crafted request using various user n...

redhat/jws5-tomcat<0:9.0.50-3.redhat_00004.1.el7

redhat/jws5-tomcat-native<0:1.2.30-3.redhat_3.el7

redhat/jws5-tomcat-vault<0:1.1.8-4.Final_redhat_00004.1.el7

redhat/jws5-tomcat<0:9.0.50-3.redhat_00004.1.el8

redhat/jws5-tomcat-native<0:1.2.30-3.redhat_3.el8

redhat/jws5-tomcat-vault<0:1.1.8-4.Final_redhat_00004.1.el8

and 20 more

● CVE-2021-21783

A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HT...

Genivia gSOAP=2.8.107

Oracle Communications Diameter Signaling Router>=8.0.0<=8.5.0

Oracle Communications EAGLE Application Processor>=16.1.0<=16.4.0

Oracle Communications Eagle Lnp Application Processor=46.7

Oracle Communications Eagle Lnp Application Processor=46.8

Oracle Communications Eagle Lnp Application Processor=46.9

and 5 more

● CVE-2021-21702

In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a respon...

<8.0.2

PHP PHP>=7.3.0<7.3.27

PHP PHP>=7.4.0<7.4.15

PHP PHP>=8.0.0<8.0.2

Debian Debian Linux=9.0

Debian Debian Linux=10.0

and 4 more

● CVE-2020-36189

A flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity...

maven/com.fasterxml.jackson.core:jackson-databind<2.6.7.5

maven/com.fasterxml.jackson.core:jackson-databind>=2.7.0<2.9.10.8

IBM Disconnected Log Collector<=v1.0 - v1.8.2

redhat/jackson-databind<2.9.10.8

FasterXML jackson-databind>=2.0.0<2.6.7.5

FasterXML jackson-databind>=2.7.0<2.9.10.8

and 65 more

● CVE-2020-35490

IBM Security Verify Governance<=10.0

redhat/jackson-databind<2.9.10.8

maven/com.fasterxml.jackson.core:jackson-databind>=2.0.0<=2.9.10.7

FasterXML jackson-databind>=2.0.0<2.9.10.8

NetApp Service Level Manager

Debian Debian Linux=9.0

and 35 more

● CVE-2020-17521

Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method ca...

Apache Groovy>=2.0.0<=2.4.20

Apache Groovy>=2.5.0<=2.5.13

Apache Groovy>=3.0.0<=3.0.6

Apache Groovy=4.0.0-alpha1

Netapp Snapcenter

Oracle Agile Engineering Data Management=6.2.1.0

and 37 more

● CVE-2020-14787

Vulnerability in the Oracle Communications Diameter Signaling Router (DSR) product of Oracle Communications (component: User Interface). Supported versions that are affected are 8.0.0.0-8.4.0.5. Easil...

Oracle Communications Diameter Signaling Router>=8.0.0.0<=8.4.0.5

● CVE-2020-14788

Oracle Communications Diameter Signaling Router>=8.0.0.0<=8.4.0.5

● CVE-2020-7069

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used...

PHP PHP>=7.2.0<7.2.34

PHP PHP>=7.3.0<7.3.23

PHP PHP>=7.4.0<7.4.11

Fedoraproject Fedora=31

Fedoraproject Fedora=32

Fedoraproject Fedora=33

and 18 more

● CVE-2020-24750

FasterXML jackson-databind 2.x before 2.6.7.5 and from 2.7.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.Jn...

FasterXML jackson-databind>=2.0.0<2.6.7.5

FasterXML jackson-databind>=2.7.0<2.9.10.6

Oracle Agile PLM=9.3.6

Oracle Application Testing Suite=13.3.0.1

Oracle Autovue For Agile Product Lifecycle Management=21.0.2

Oracle Banking Corporate Lending Process Management=14.2.0

and 36 more

● CVE-2020-11998

A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it le...

Apache ActiveMQ=5.15.12

Oracle Communications Diameter Signaling Router>=8.0.0<=8.5.0

Oracle Communications Element Manager>=8.2.0<=8.2.4.0

Oracle Communications Session Report Manager>=8.0.0<=8.2.2

Oracle Communications Session Route Manager>=8.0.0<=8.2.2

Oracle Enterprise Repository=11.1.1.7.0

and 3 more

● CVE-2020-13920

Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and cal...

redhat/Apache ActiveMQ<5.15.12

IBM Security Directory Suite VA<=8.0.1-8.0.1.19

Apache ActiveMQ<5.15.12

Oracle Communications Diameter Signaling Router>=8.0.0<=8.2.2

Oracle FLEXCUBE Private Banking=12.0.0

Oracle FLEXCUBE Private Banking=12.1.0

and 2 more

● CVE-2020-24616

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP).

maven/com.fasterxml.jackson.core:jackson-databind>=2.0.0<=2.9.10.5

IBM ISAM<=9.0.7

IBM Security Verify Access<=10.0.0

FasterXML jackson-databind>=2.0.0<2.9.10.6

Netapp Active Iq Unified Manager Linux

Netapp Active Iq Unified Manager Vmware Vsphere

and 30 more

● CVE-2020-8622

In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or...

IBM Cloud Pak for Security (CP4S)<=1.7.2.0

IBM Cloud Pak for Security (CP4S)<=1.7.1.0

IBM Cloud Pak for Security (CP4S)<=1.7.0.0

ISC BIND>=9.0.0<=9.11.21

ISC BIND>=9.12.0<=9.16.5

ISC BIND>=9.17.0<=9.17.3

and 21 more

● CVE-2020-11994

Server-Side Template Injection and arbitrary file disclosure on Camel templating components

Apache Camel>=2.22.0<=2.22.5

Apache Camel>=2.23.0<=2.23.4

Apache Camel>=2.24.0<=2.24.3

Apache Camel>=3.0.0<=3.3.0

Apache Camel=2.25.0

Apache Camel=2.25.1

and 3 more

● CVE-2020-14195

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind mishandles the interaction between serialization gadgets and typing. The highest threat from this vul...

redhat/candlepin<0:2.6.16-1.el7

redhat/foreman<0:1.22.0.39-2.el7

redhat/satellite<0:6.6.3-1.el7

redhat/tfm-rubygem-fog-ovirt<0:1.2.3-1.el7

redhat/tfm-rubygem-katello<0:3.12.0.41-1.el7

redhat/tfm-rubygem-runcible<0:2.13.0-1.el7

and 311 more

● CVE-2020-12723

Perl. This issue was addressed with improved checks.

IBM BM Security Guardium<=11.3

IBM Security Guardium<=11.4

IBM Security Guardium<=11.5

Apple macOS Catalina<10.15.6

Apple Mojave

Apple High Sierra

and 21 more

● CVE-2020-10543

Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.

IBM BM Security Guardium<=11.3

IBM Security Guardium<=11.4

IBM Security Guardium<=11.5

Perl Perl<5.30.3

Fedoraproject Fedora=31

openSUSE Leap=15.1

and 20 more

● CVE-2020-10878

Perl. This issue was addressed with improved checks.

IBM BM Security Guardium<=11.3

IBM Security Guardium<=11.4

IBM Security Guardium<=11.5

Apple macOS Catalina<10.15.6

Apple Mojave

Apple High Sierra

and 25 more

● CVE-2020-9484

When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; a...

redhat/tomcat6<0:6.0.24-115.el6_10

redhat/tomcat<0:7.0.76-12.el7_8

redhat/tomcat7<0:7.0.70-40.ep7.el6

redhat/tomcat8<0:8.0.36-44.ep7.el6

redhat/tomcat-native<0:1.2.23-22.redhat_22.ep7.el6

redhat/tomcat7<0:7.0.70-40.ep7.el7

and 99 more

● CVE-2020-14061

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this...

redhat/candlepin<0:2.6.16-1.el7

redhat/foreman<0:1.22.0.39-2.el7

redhat/satellite<0:6.6.3-1.el7

redhat/tfm-rubygem-fog-ovirt<0:1.2.3-1.el7

redhat/tfm-rubygem-katello<0:3.12.0.41-1.el7

redhat/tfm-rubygem-runcible<0:2.13.0-1.el7

and 311 more

● CVE-2020-14060

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data co...

redhat/candlepin<0:2.6.16-1.el7

redhat/foreman<0:1.22.0.39-2.el7

redhat/satellite<0:6.6.3-1.el7

redhat/tfm-rubygem-fog-ovirt<0:1.2.3-1.el7

redhat/tfm-rubygem-katello<0:3.12.0.41-1.el7

redhat/tfm-rubygem-runcible<0:2.13.0-1.el7

and 30 more

● CVE-2020-14062

redhat/candlepin<0:2.6.16-1.el7

redhat/foreman<0:1.22.0.39-2.el7

redhat/satellite<0:6.6.3-1.el7

redhat/tfm-rubygem-fog-ovirt<0:1.2.3-1.el7

redhat/tfm-rubygem-katello<0:3.12.0.41-1.el7

redhat/tfm-rubygem-runcible<0:2.13.0-1.el7

and 309 more

● CVE-2020-1941

Apache ActiveMQ is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the admin GUI. A remote attacker could exploit this vulnerability using a specially-craft...

IBM Security Directory Suite VA<=8.0.1-8.0.1.19

Apache ActiveMQ>=5.0.0<=5.15.11

Oracle Communications Diameter Signaling Router>=8.0.0<=8.2.2

Oracle Communications Element Manager=8.1.1

Oracle Communications Element Manager=8.2.0

Oracle Communications Element Manager=8.2.1

and 10 more

● CVE-2020-11971

Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrade to 3.2.0.

Apache Camel>=2.22.0<=3.1.0

Oracle Communications Diameter Intelligence Hub>=8.0.0<=8.1.0

Oracle Communications Diameter Intelligence Hub>=8.2.0<=8.2.3

Oracle Communications Diameter Signaling Router>=8.0.0<=8.2.2

Oracle Enterprise Manager Base Platform=13.3.0.0

Oracle Enterprise Manager Base Platform=13.4.0.0

and 2 more

● CVE-2020-11972

Apache Camel RabbitMQ enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade...

Apache Camel>=2.22.0<=2.25.0

Apache Camel>=3.0.0<=3.1.0

Oracle Communications Diameter Signaling Router>=8.0.0<=8.2.2

Oracle Enterprise Manager Base Platform=13.3.0.0

Oracle Enterprise Manager Base Platform=13.4.0.0

Oracle FLEXCUBE Private Banking=12.0.0

and 1 more

● CVE-2020-11973

Apache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to...

redhat/camel<3.2.0

redhat/camel<2.25.1

Apache Camel>=2.22.0<=2.25.0

Apache Camel>=3.0.0<=3.1.0

Oracle Communications Diameter Signaling Router>=8.0.0<=8.5.0

Oracle Enterprise Manager Base Platform=13.3.0.0

and 3 more

● CVE-2020-1945

Apache Ant could allow a remote attacker to bypass security restrictions, caused by the use of an insecure temporary directory to store source files. By sending a specially-crafted request, an attacke...

redhat/jenkins<0:2.263.3.1612433584-1.el7

redhat/conmon<2:2.0.21-1.rhaos4.5.el8

redhat/jenkins<0:2.263.3.1612434332-1.el7

redhat/machine-config-daemon<0:4.5.0-202102050524.p0.git.2594.ff3b8c0.el8

redhat/openshift<0:4.5.0-202102050524.p0.git.0.9229406.el7

redhat/openshift-ansible<0:4.5.0-202102031005.p0.git.0.c6839a2.el7

and 128 more

● CVE-2020-7067

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be made to access locations past the allocated...

<7.3.17

PHP PHP>=7.2.0<7.2.30

PHP PHP>=7.3.0<7.3.17

PHP PHP>=7.4.0<7.4.5

Tenable Tenable.sc<5.19.0

Oracle Communications Diameter Signaling Router>=8.0.0.0<=8.4.0.5

and 4 more

● CVE-2020-11619

A flaw was found in jackson-databind 2.x. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as...

redhat/candlepin<0:2.6.16-1.el7

redhat/foreman<0:1.22.0.39-2.el7

redhat/satellite<0:6.6.3-1.el7

redhat/tfm-rubygem-fog-ovirt<0:1.2.3-1.el7

redhat/tfm-rubygem-katello<0:3.12.0.41-1.el7

redhat/tfm-rubygem-runcible<0:2.13.0-1.el7

and 325 more

● CVE-2020-1954

Apache CXF has the ability to integrate with JMX by registering an `InstrumentationManager` extension with the CXF bus. If the `createMBServerConnectorFactory` property of the default `Instrumentation...

maven/org.apache.cxf:cxf-rt-management>=3.3.0<3.3.6

maven/org.apache.cxf:cxf-rt-management<3.2.13

redhat/eap7-activemq-artemis<0:2.9.0-5.redhat_00011.1.el6ea

redhat/eap7-activemq-artemis-native<1:1.0.2-1.redhat_00001.1.el6ea

redhat/eap7-apache-commons-codec<0:1.14.0-1.redhat_00001.1.el6ea

redhat/eap7-apache-commons-lang<0:3.10.0-1.redhat_00001.1.el6ea

and 98 more

● CVE-2020-11113

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data co...

redhat/qpid-cpp<0:1.36.0-31.el6_10a

redhat/qpid-proton<0:0.32.0-1.el6_10

redhat/qpid-cpp<0:1.36.0-31.el7a

redhat/qpid-proton<0:0.32.0-2.el7

redhat/nodejs-rhea<0:1.0.24-1.el8

redhat/qpid-proton<0:0.32.0-2.el8

and 59 more

● CVE-2020-11112

FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization in org.apache.commons.proxy.provider.remoting.RmiProvider (aka apa...

redhat/Jackson-databind<2.9.10.4

redhat/rh-maven35-jackson-databind<0:2.7.6-2.9.el7

IBM Data Risk Manager<=2.0.6

FasterXML jackson-databind>=2.9.0<2.9.10.4

Debian Debian Linux=8.0

Netapp Steelstore Cloud Integrated Storage

and 51 more

● CVE-2020-11111

FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization in org.apache.activemq.* (aka activemq-jms, activemq-core, activem...

redhat/Jackson-databind<2.9.10.4

redhat/rh-maven35-jackson-databind<0:2.7.6-2.9.el7

IBM Data Risk Manager<=2.0.6

FasterXML jackson-databind>=2.9.0<2.9.10.4

Debian Debian Linux=8.0

Netapp Steelstore Cloud Integrated Storage

and 39 more

● CVE-2020-10968

A flaw was found in jackson-databind 2.x prior to version 2.9.10.4. The interaction between serialization gadgets and typing is mishandled in the bus-proxy. The highest threat from this vulnerability...

redhat/candlepin<0:2.6.16-1.el7

redhat/foreman<0:1.22.0.39-2.el7

redhat/satellite<0:6.6.3-1.el7

redhat/tfm-rubygem-fog-ovirt<0:1.2.3-1.el7

redhat/tfm-rubygem-katello<0:3.12.0.41-1.el7

redhat/tfm-rubygem-runcible<0:2.13.0-1.el7

and 345 more

● CVE-2020-10673

FasterXML jackson-databind 2.x before 2.9.10.4 and 2.6.7.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).

maven/com.fasterxml.jackson.core:jackson-databind>=2.0.0<2.6.7.4

maven/com.fasterxml.jackson.core:jackson-databind>=2.7.0<2.9.10.4

redhat/Jackson-databind<2.9.10.4

redhat/eap7-dom4j<0:2.1.3-1.redhat_00001.1.el6ea

redhat/eap7-elytron-web<0:1.2.5-1.Final_redhat_00001.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-13.SP3_redhat_00011.1.el6ea

and 161 more

● CVE-2020-10672

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this...

redhat/eap7-dom4j<0:2.1.3-1.redhat_00001.1.el6ea

redhat/eap7-elytron-web<0:1.2.5-1.Final_redhat_00001.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-13.SP3_redhat_00011.1.el6ea

redhat/eap7-hal-console<0:3.0.23-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.17-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate-validator<0:6.0.20-1.Final_redhat_00001.1.el6ea

and 159 more

● CVE-2020-10969

FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization in javax.swing.JEditorPane. By sending specially-crafted input, an...

redhat/candlepin<0:2.6.16-1.el7

redhat/foreman<0:1.22.0.39-2.el7

redhat/satellite<0:6.6.3-1.el7

redhat/tfm-rubygem-fog-ovirt<0:1.2.3-1.el7

redhat/tfm-rubygem-katello<0:3.12.0.41-1.el7

redhat/tfm-rubygem-runcible<0:2.13.0-1.el7

and 345 more

● CVE-2020-9548

A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data conf...

redhat/eap7-dom4j<0:2.1.3-1.redhat_00001.1.el6ea

redhat/eap7-elytron-web<0:1.2.5-1.Final_redhat_00001.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-13.SP3_redhat_00011.1.el6ea

redhat/eap7-hal-console<0:3.0.23-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.17-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate-validator<0:6.0.20-1.Final_redhat_00001.1.el6ea

and 566 more

● CVE-2020-9546

redhat/eap7-dom4j<0:2.1.3-1.redhat_00001.1.el6ea

redhat/eap7-elytron-web<0:1.2.5-1.Final_redhat_00001.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-13.SP3_redhat_00011.1.el6ea

redhat/eap7-hal-console<0:3.0.23-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.17-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate-validator<0:6.0.20-1.Final_redhat_00001.1.el6ea

and 576 more

● CVE-2020-7060

When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause functio...

redhat/rh-php73-php<0:7.3.20-1.el7

PHP PHP>=7.2.0<7.2.27

PHP PHP>=7.3.0<7.3.14

PHP PHP>=7.4.0<7.4.2

Tenable Tenable.sc<5.19.0

Oracle Communications Diameter Signaling Router>=8.0<=8.4

and 12 more

● CVE-2020-7059

When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function ...

redhat/rh-php73-php<0:7.3.20-1.el7

PHP PHP>=7.2.0<7.2.27

PHP PHP>=7.3.0<7.3.14

PHP PHP>=7.4.0<7.4.2

Tenable Tenable.sc<5.19.0

Oracle Communications Diameter Signaling Router>=8.0<=8.4

and 12 more

Latest oracle communications diameter signaling router Vulnerabilities

Company

Resources

Contact