Filters

Versions

12.5.0
33
10.4.1
9
12.1.1
9
9.7.3
9
9.9.1
9
12.6.0.0.0
4
11.5
2
12.0
2
12.0.0.4.0
1
12.1.0
1
12.1.2
1
12.2.0
1
12.2.2
1
12.3
1
12.3.1
1
12.4.0
1
12.4.1
1
12.5.0.0.0
1
12.5.1
1

Veritas NetBackup ApplianceSpring Framework JDK 9+ Remote Code Execution Vulnerability

critical
9.8
Exploited
First published (updated )
CVE-2022-22965

Oracle Retail Xstore Point of ServiceDenial of Service by injecting highly recursive collections or maps in XStream

high
7.5
First published (updated )
CVE-2021-43859

Oracle Primavera UnifierPrototype Pollution

critical
9.8
First published (updated )
CVE-2021-23450

redhat/nssA remote code execution flaw was found in the way NSS verifies certificates. This flaw allows an att…

critical
9.8
First published (updated )
CVE-2021-43527

McAfee ePolicy OrchestratorIncorrect Transfer-Encoding handling with HTTP/1.0

medium
5.3
First published (updated )
CVE-2021-33037

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Banking ApisPossible limited path traversal vulnerabily in Apache Commons IO

medium
5.8
First published (updated )
CVE-2021-29425

Oracle Communications Unified Inventory ManagementXStream is vulnerable to a Remote Command Execution attack

critical
9.9
First published (updated )
CVE-2021-21345

Oracle Communications Unified Inventory ManagementA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

high
8.6
First published (updated )
CVE-2021-21349

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights

high
7.5
First published (updated )
CVE-2021-21343

Oracle Communications Unified Inventory ManagementA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

critical
9.1
First published (updated )
CVE-2021-21342

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

critical
9.8
First published (updated )
CVE-2021-21350

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)

high
7.8
First published (updated )
CVE-2021-21348

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

critical
9.8
First published (updated )
CVE-2021-21346

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

critical
9.8
First published (updated )
CVE-2021-21347

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

critical
9.8
First published (updated )
CVE-2021-21344

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

critical
9.1
First published (updated )
CVE-2021-21351

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36180

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36182

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36183

Oracle Primavera GatewayFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36179

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36181

Oracle Primavera GatewayA flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gad…

high
8.1
First published (updated )
CVE-2020-35728

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36188

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36185

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36186

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36184

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36187

Oracle Communications Diameter Intelligence HubApache Struts Remote Code Execution Vulnerability

critical
9.8
Exploited
First published (updated )
CVE-2020-17530

Oracle Retail Xstore Point of ServiceRemote Code Execution in XStream

critical
9.3
First published (updated )
CVE-2020-26217

Oracle Banking Corporate Lending Process ManagementFasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-24750

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Financial Services Data Integration HubAn access permission override in Apache Struts 2.0.0 to 2.5.20 may cause a Denial of Service when pe…

high
7.5
First published (updated )
CVE-2019-0233

Oracle Financial Services Data Integration HubApache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag…

critical
9.8
First published (updated )
CVE-2019-0230

Oracle Banking Liquidity ManagementCode Injection

critical
9.8
First published (updated )
CVE-2020-24616

Linuxfoundation DojoPrototype pollution in dojo

high
7.7
First published (updated )
CVE-2020-5258

Oracle Insurance Policy Administration J2EECSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux

medium
5.3
First published (updated )
CVE-2020-5397

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Insurance Policy Administration J2EERFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application

high
8
First published (updated )
CVE-2020-5398

Apache StrutsApache Struts Remote Code Execution Vulnerability

critical
9.3
Exploited
First published (updated )
CVE-2018-11776

Oracle Retail Integration BusPath Traversal

medium
5.9
First published (updated )
CVE-2018-1271

Oracle Communications Policy ManagementVulnerability in the Oracle Communications Policy Management component of Oracle Communications Appl…

medium
6.1
First published (updated )
CVE-2017-10159

Oracle Communications Policy ManagementVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Suppo…

medium
6.5
First published (updated )
CVE-2017-3633

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Communications Policy ManagementUnspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated user…

medium
4
First published (updated )
CVE-2015-0423

Oracle Communications Policy ManagementUnspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated user…

medium
4
First published (updated )
CVE-2015-0500

Redhat Enterprise Linux EusUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows …

medium
4
First published (updated )
CVE-2015-0433

Redhat Enterprise Linux EusUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows …

medium
5
First published (updated )
CVE-2015-2568

redhat/javaLast updated 24 July 2024

medium
5
First published (updated )
CVE-2015-2808

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Communications Policy ManagementBuffer Overflow

critical
10
First published (updated )
CVE-2015-0235

Oracle Communications Policy ManagementUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows …

high
7.5
First published (updated )
CVE-2015-0411

Redhat Enterprise Linux EusUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows re…

medium
4.3
First published (updated )
CVE-2015-0382

Redhat Enterprise Linux EusUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows re…

medium
4.3
First published (updated )
CVE-2015-0381

Oracle Communications Policy ManagementUnspecified vulnerability in Oracle MySQL Server 5.6.21 and earlier allows remote authenticated user…

medium
4
First published (updated )
CVE-2015-0409

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203