Latest oracle enterprise manager ops center Vulnerabilities

● CVE-2022-1292

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. O...

redhat/jbcs-httpd24-openssl<1:1.1.1k-13.el8

redhat/jbcs-httpd24-openssl<1:1.1.1k-13.el7

redhat/openssl<1:1.1.1k-7.el8_6

redhat/openssl<1:3.0.1-41.el9_0

redhat/jws5-tomcat-native<0:1.2.31-11.redhat_11.el7

redhat/jws5-tomcat-native<0:1.2.31-11.redhat_11.el8

and 108 more

● CVE-2022-22720

A flaw was found in httpd. The inbound connection is not closed when it fails to discard the request body, which may expose the server to HTTP request smuggling.

redhat/jbcs-httpd24-apr-util<0:1.6.1-91.el8

redhat/jbcs-httpd24-curl<0:7.78.0-3.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-80.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-11.el8

redhat/jbcs-httpd24-openssl-chil<0:1.0.0-11.el8

and 42 more

● CVE-2022-22721

A flaw was found in httpd, where it incorrectly limits the value of the LimitXMLRequestBody option. This issue can lead to an integer overflow and later causes an out-of-bounds write.

Apple Catalina

Apple macOS Big Sur<11.6.6

<12.4

Apache HTTP server<=2.4.52

Fedoraproject Fedora=34

Fedoraproject Fedora=35

and 26 more

● CVE-2021-4160

OpenSSL could provide weaker than expected security, caused by a carry propagation flaw in the MIPS32 and MIPS64 squaring procedure. An attacker could exploit this vulnerability to launch further atta...

debian/openssl

IBM Cognos Analytics<=12.0.0-12.0.1

IBM Cognos Analytics<=11.2.0-11.2.4 FP2

IBM Cognos Analytics<=11.1.1-11.1.7 FP7

OpenSSL OpenSSL>=1.0.2<=1.0.2zb

OpenSSL OpenSSL>=1.1.1<1.1.1m

and 33 more

● CVE-2021-45105

Apache Log4j StrSubstitutor Uncontrolled Recursion Denial-of-Service Vulnerability

redhat/eap7-log4j<0:2.17.1-1.redhat_00001.1.el8ea

redhat/eap7-log4j<0:2.17.1-1.redhat_00001.1.el7ea

redhat/rh-sso7-keycloak<0:15.0.6-1.redhat_00001.1.el7

redhat/rh-sso7-keycloak<0:15.0.6-1.redhat_00001.1.el8

debian/apache-log4j2

debian/apache-log4j2<=2.16.0-1~deb10u1<=2.16.0-1<=2.16.0-1~deb11u1

and 217 more

● CVE-2021-40438

Apache HTTP Server-Side Request Forgery (SSRF)

Apache HTTP server<=2.4.48

Fedoraproject Fedora=34

Fedoraproject Fedora=35

Debian Debian Linux=9.0

Debian Debian Linux=10.0

and 27 more

● CVE-2021-2351

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unau...

Oracle Advanced Networking Option=12.1.0.2

Oracle Advanced Networking Option=12.2.0.1

Oracle Advanced Networking Option=19c

Oracle Agile Engineering Data Management=6.2.1.0

Oracle Agile PLM=9.3.6

Oracle Agile Product Lifecycle Management for Process=6.2.2.0

and 242 more

● CVE-2021-22222

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file

debian/wireshark

Wireshark Wireshark>=3.4.0<=3.4.5

Oracle Enterprise Manager Ops Center=12.4.0.0

Oracle Instantis Enterprisetrack=17.1

Oracle Instantis Enterprisetrack=17.2

Oracle Instantis Enterprisetrack=17.3

and 3 more

● CVE-2021-31618

NULL pointer dereference on specially crafted HTTP/2 request

Apache HTTP server=1.15.17

Apache HTTP server=2.4.47

Fedoraproject Fedora=33

Fedoraproject Fedora=34

Debian Debian Linux=9.0

Debian Debian Linux=10.0

and 5 more

● CVE-2021-30641

Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF'

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 20 more

● CVE-2019-17567

Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing f...

Apache HTTP server>=2.4.6<=2.4.46

Fedoraproject Fedora=34

Fedoraproject Fedora=35

Oracle Enterprise Manager Ops Center=12.4.0.0

Oracle Instantis Enterprisetrack=17.1

Oracle Instantis Enterprisetrack=17.2

and 2 more

● CVE-2020-13950

Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, lea...

Apache HTTP server>=2.4.41<=2.4.46

Debian Debian Linux=9.0

Debian Debian Linux=10.0

Fedoraproject Fedora=34

Fedoraproject Fedora=35

Oracle Enterprise Manager Ops Center=12.4.0.0

and 20 more

● CVE-2021-26691

In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 23 more

● CVE-2021-26690

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 20 more

● CVE-2020-35452

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP S...

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 20 more

● CVE-2021-33503

### Impact When provided with a URL containing many `@` characters in the authority component the authority regular expression exhibits catastrophic backtracking causing a denial of service if a URL ...

redhat/automation-hub<0:4.2.6-1.el7

redhat/python3-chardet<0:3.0.4-3.el7

redhat/python3-click<0:7.1.2-3.el7

redhat/python3-gnupg<0:0.4.6-3.el7

redhat/python3-jinja2<0:2.11.2-3.el7

redhat/python3-markupsafe<0:1.1.1-4.el7

and 38 more

● CVE-2021-29505

XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the...

redhat/xstream<0:1.3.1-14.el7_9

debian/libxstream-java

redhat/xstream<1.4.17

Xstream Project Xstream<1.4.17

Debian Debian Linux=9.0

Debian Debian Linux=10.0

and 37 more

● CVE-2021-3537

A NULL pointer dereference flaw was found in libxml2, where it did not propagate errors while parsing XML mixed content. This flaw causes the application to crash if an untrusted XML document is parse...

redhat/jbcs-httpd24-apr-util<0:1.6.1-91.el8

redhat/jbcs-httpd24-curl<0:7.78.0-3.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-80.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-11.el8

redhat/jbcs-httpd24-openssl-chil<0:1.0.0-11.el8

and 36 more

● CVE-2021-3518

libxml2. This issue was addressed with improved checks.

rubygems/nokogiri<1.11.4

redhat/jbcs-httpd24-apr-util<0:1.6.1-91.el8

redhat/jbcs-httpd24-curl<0:7.78.0-3.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-80.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-11.el8

and 37 more

● CVE-2021-23840

OpenSSL is vulnerable to a denial of service, caused by an integer overflow in CipherUpdate. By sending an overly long argument, an attacker could exploit this vulnerability to cause the application t...

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 86 more

● CVE-2021-23841

WebRTC. A null pointer dereference was addressed with improved input validation.

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 67 more

● CVE-2021-23839

OpenSSL could provide weaker than expected security, caused by incorrect SSLv2 rollback protection that allows for the inversion of the logic during a padding check. If the server is configured for SS...

OpenSSL OpenSSL>=1.0.2s<=1.0.2x

Oracle Business Intelligence=5.5.0.0.0

Oracle Business Intelligence=5.9.0.0.0

Oracle Business Intelligence=12.2.1.3.0

Oracle Business Intelligence=12.2.1.4.0

Oracle Enterprise Manager For Storage Management=13.4.0.0

and 14 more

● CVE-2021-23336

Python CPython could allow a remote attacker to bypass security restrictions, caused by a web cache poisoning flaw via urllib.parse.parse_qsl and urllib.parse.parse_qs. By sending a specially-crafted ...

IBM Cloud Pak for Security (CP4S)<=1.7.2.0

IBM Cloud Pak for Security (CP4S)<=1.7.1.0

IBM Cloud Pak for Security (CP4S)<=1.7.0.0

Python Python<3.6.13

Python Python>=3.7.0<3.7.10

Python Python>=3.8.0<3.8.8

and 28 more

● CVE-2021-3177

Python is vulnerable to a buffer overflow, caused by improper bounds checking by the PyCArg_repr function in _ctypes/callproc.c. By sending specially-crafted arguments to c_double.from_param, a remote...

redhat/python<0:2.7.5-92.el7_9

redhat/python3<0:3.6.8-37.el8

redhat/python27-babel<0:0.9.6-10.el7

redhat/python27-python<0:2.7.18-3.el7

redhat/python27-python-jinja2<0:2.6-16.el7

redhat/python27-python-pygments<0:1.5-5.el7

and 39 more

● CVE-2020-1971

A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash res...

redhat/jbcs-httpd24-brotli<0:1.0.6-40.jbcs.el7

redhat/jbcs-httpd24-httpd<0:2.4.37-66.jbcs.el7

redhat/jbcs-httpd24-nghttp2<0:1.39.2-35.jbcs.el7

redhat/jbcs-httpd24-openssl<1:1.1.1g-3.jbcs.el7

redhat/jbcs-httpd24-openssl-chil<0:1.0.0-3.jbcs.el7

redhat/jbcs-httpd24-openssl-pkcs11<0:0.4.10-18.jbcs.el7

and 95 more

● CVE-2020-24977

GNOME libxml2 is vulnerable to a buffer overflow, caused by improper bounds checking by the xmlEncodeEntitiesInternal function in libxml2/entities.c. By persuading a victim to open a specially-crafted...

IBM Security Verify Access<=10.0.0

Xmlsoft Libxml2=2.9.10

Debian Debian Linux=9.0

Fedoraproject Fedora=31

Fedoraproject Fedora=32

Fedoraproject Fedora=33

and 22 more

● CVE-2020-9490

Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resour...

ubuntu/apache2<2.4.29-1ubuntu4.14

ubuntu/apache2<2.4.41-4ubuntu3.1

ubuntu/apache2<2.4.44

>=2.4.20<2.4.46

>=8.2.0<=8.2.2

and 106 more

● CVE-2020-11993

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing conc...

redhat/httpd<2.4.44

redhat/jbcs-httpd24-apr<0:1.6.3-104.jbcs.el6

redhat/jbcs-httpd24-apr-util<0:1.6.1-75.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-38.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-44.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-64.jbcs.el6

and 55 more

● CVE-2020-11984

Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

redhat/jbcs-httpd24-apr<0:1.6.3-104.jbcs.el6

redhat/jbcs-httpd24-apr-util<0:1.6.1-75.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-38.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-44.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-64.jbcs.el6

redhat/jbcs-httpd24-jansson<0:2.11-53.jbcs.el6

and 44 more

● CVE-2020-15358

In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.

IBM Security Verify Access<=10.0.0

Apple iCloud for Windows<7.21

Apple macOS Big Sur<11.0.1

Google Android

Apple macOS Big Sur<11.2

Apple Catalina

and 27 more

● CVE-2020-14422

A vulnerability was found in Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a den...

redhat/python3<0:3.6.8-18.el7

redhat/python3<0:3.6.8-31.el8

redhat/rh-python36-python<0:3.6.12-1.el6

redhat/rh-python36-python-pip<0:9.0.1-5.el6

redhat/rh-python36-python-virtualenv<0:15.1.0-3.el6

redhat/rh-python36-python<0:3.6.12-1.el7

and 22 more

● CVE-2020-13871

SQLite is vulnerable to a denial of service, caused by a use-after-free in resetAccumulator in select.c. By sending a specially crafted request, a remote attacker could exploit this vulnerability to c...

IBM Data Risk Manager<=2.0.6

SQLite SQLite=3.32.2

Fedoraproject Fedora=33

Debian Debian Linux=9.0

Oracle Communications Messaging Server=8.1

Oracle Communications Network Charging And Control=6.0.1

and 9 more

● CVE-2020-1945

Apache Ant could allow a remote attacker to bypass security restrictions, caused by the use of an insecure temporary directory to store source files. By sending a specially-crafted request, an attacke...

redhat/jenkins<0:2.263.3.1612433584-1.el7

redhat/conmon<2:2.0.21-1.rhaos4.5.el8

redhat/jenkins<0:2.263.3.1612434332-1.el7

redhat/machine-config-daemon<0:4.5.0-202102050524.p0.git.2594.ff3b8c0.el8

redhat/openshift<0:4.5.0-202102050524.p0.git.0.9229406.el7

redhat/openshift-ansible<0:4.5.0-202102031005.p0.git.0.c6839a2.el7

and 128 more

● CVE-2020-11022

### Impact Passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. `.html()`, `.append()`, and others) may execute untrusted code. ### Patch...

rubygems/jquery-rails<4.4.0

maven/org.webjars.npm:jquery>=1.2.0<3.5.0

nuget/jquery>=1.2.0<3.5.0

npm/jquery>=1.2.0<3.5.0

redhat/qpid-dispatch<0:1.13.0-3.el6_10

redhat/qpid-dispatch<0:1.13.0-3.el7

and 164 more

● CVE-2020-1967

Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signatu...

debian/openssl

OpenSSL OpenSSL>=1.1.1d<=1.1.1f

Debian Debian Linux=9.0

Debian Debian Linux=10.0

FreeBSD FreeBSD=12.1

Fedoraproject Fedora=30

and 33 more

● CVE-2020-11656

In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.

SQLite SQLite<=3.31.1

NetApp ONTAP Select Deploy administration utility

Oracle Communications Network Charging And Control>=12.0.0<=12.0.3

Oracle Communications Network Charging And Control=6.0.1

Oracle Communications Network Charging And Control=12.0.2

Oracle Enterprise Manager Ops Center=12.4.0.0

and 9 more

● CVE-2020-11655

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

SQLite SQLite<=3.31.1

NetApp ONTAP Select Deploy administration utility

Debian Debian Linux=8.0

Debian Debian Linux=9.0

Canonical Ubuntu Linux=16.04

Canonical Ubuntu Linux=18.04

and 26 more

● CVE-2020-1927

In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL ...

redhat/jbcs-httpd24-apr<0:1.6.3-86.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-21.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-52.jbcs.el6

redhat/jbcs-httpd24-openssl<1:1.1.1c-16.jbcs.el6

redhat/jbcs-httpd24-apr<0:1.6.3-86.jbcs.el7

redhat/jbcs-httpd24-brotli<0:1.0.6-21.jbcs.el7

and 59 more

● CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.

redhat/jbcs-httpd24-curl<0:7.64.1-36.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-57.jbcs.el6

redhat/jbcs-httpd24-nghttp2<0:1.39.2-25.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-36.jbcs.el7

redhat/jbcs-httpd24-httpd<0:2.4.37-57.jbcs.el7

redhat/jbcs-httpd24-nghttp2<0:1.39.2-25.jbcs.el7

and 50 more

● CVE-2020-9327

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

SQLite SQLite=3.31.1

Netapp Cloud Backup

Canonical Ubuntu Linux=16.04

Canonical Ubuntu Linux=18.04

Canonical Ubuntu Linux=19.10

Siemens Sinec Infrastructure Network Services<1.0.1.1

and 15 more

● CVE-2019-20388

GNOME libxml2 could allow a remote attacker to obtain sensitive information, caused by a xmlSchemaValidateStream memory leak in xmlSchemaPreRun in xmlschemas.c. By persuading a victim to open a specia...

redhat/jbcs-httpd24-curl<0:7.64.1-36.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-57.jbcs.el6

redhat/jbcs-httpd24-nghttp2<0:1.39.2-25.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-36.jbcs.el7

redhat/jbcs-httpd24-httpd<0:2.4.37-57.jbcs.el7

redhat/jbcs-httpd24-nghttp2<0:1.39.2-25.jbcs.el7

and 59 more

● CVE-2020-7595

GNOME libxml2 is vulnerable to a denial of service, caused by an error in xmlStringLenDecodeEntities in parser.c. An attacker could exploit this vulnerability to cause the application to enter into an...

redhat/jbcs-httpd24-curl<0:7.64.1-36.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-57.jbcs.el6

redhat/jbcs-httpd24-nghttp2<0:1.39.2-25.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-36.jbcs.el7

redhat/jbcs-httpd24-httpd<0:2.4.37-57.jbcs.el7

redhat/jbcs-httpd24-nghttp2<0:1.39.2-25.jbcs.el7

and 72 more

● CVE-2019-1551

OpenSSL could allow a remote attacker to obtain sensitive information, caused by an overflow in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. By performing a man...

redhat/jbcs-httpd24-apr<0:1.6.3-104.jbcs.el6

redhat/jbcs-httpd24-apr-util<0:1.6.1-75.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-38.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-44.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-64.jbcs.el6

redhat/jbcs-httpd24-jansson<0:2.11-53.jbcs.el6

and 40 more

● CVE-2019-5482

cURL libcurl is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the tftp_receive_packet function. By sending specially-crafted request containing an OACK without the ...

debian/curl

debian/curl<=7.52.1-5+deb9u9<=7.52.1-1<=7.64.0-4<=7.65.3-1

IBM Security Guardium<=10.5

IBM Security Guardium<=10.6

IBM Security Guardium<=11.0

IBM Security Guardium<=11.1

and 32 more

● CVE-2019-5481

Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.

debian/curl

debian/curl<=7.52.1-5+deb9u9<=7.64.0-4<=7.65.3-1<=7.52.1-1

Haxx Curl>=7.52.0<=7.65.3

Fedoraproject Fedora=29

Fedoraproject Fedora=30

Fedoraproject Fedora=31

and 20 more

● CVE-2019-10097

In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buff...

Apache HTTP server=2.4.33

Apache HTTP server=2.4.34

Apache HTTP server=2.4.35

Apache HTTP server=2.4.37

Apache HTTP server=2.4.38

Oracle Communications Element Manager=8.0.0

and 32 more

● CVE-2019-10082

In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown.

redhat/jbcs-httpd24-apr<0:1.6.3-86.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-21.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-52.jbcs.el6

redhat/jbcs-httpd24-openssl<1:1.1.1c-16.jbcs.el6

redhat/jbcs-httpd24-apr<0:1.6.3-86.jbcs.el7

redhat/jbcs-httpd24-brotli<0:1.0.6-21.jbcs.el7

and 31 more

● CVE-2019-10092

In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead...

redhat/jbcs-httpd24-apr<0:1.6.3-86.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-21.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-52.jbcs.el6

redhat/jbcs-httpd24-openssl<1:1.1.1c-16.jbcs.el6

redhat/jbcs-httpd24-apr<0:1.6.3-86.jbcs.el7

redhat/jbcs-httpd24-brotli<0:1.0.6-21.jbcs.el7

and 66 more

● CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This...

redhat/eap7-apache-cxf<0:3.2.11-1.redhat_00001.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-6.SP3_redhat_00004.1.el6ea

redhat/eap7-hal-console<0:3.0.19-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.14-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate-validator<0:6.0.18-1.Final_redhat_00001.1.el6ea

redhat/eap7-jackson-annotations<0:2.9.10-1.redhat_00003.1.el6ea

and 779 more

● CVE-2019-13990

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.

redhat/rhvm-dependencies<0:4.4.0-1.el8e

IBM Data Risk Manager<=2.0.6

maven/org.quartz-scheduler:quartz<2.3.2

redhat/quartz<2.3.2

Softwareag Quartz<2.3.2

Oracle Apache Batik Mapviewer=12.2.0.1

and 178 more

Latest oracle enterprise manager ops center Vulnerabilities

Company

Resources

Contact