Filter
Versions
Oracle Retail Xstore Point of ServiceDenial of Service by injecting highly recursive collections or maps in XStream
7.5
First published (updated )
Apache Log4jApache log4j2 log messages substitution (CVE-2021-44228)
First published (updated )
Oracle Retail Financial IntegrationBypass of the secureValidation property
7.5
First published (updated )
Oracle Banking Digital ExperienceVulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versi…
8.3
First published (updated )
Eclipse JettyEclipse Jetty could allow a remote attacker to bypass security restrictions, caused by a flaw when G…
5.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle Retail Xstore Point of ServiceRFD Protection Bypass via jsessionid
8.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
ubuntu/activemqActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind
8.1
First published (updated )
Vmware Spring IntegrationKryo Configuration Allows Code Execution with Unknown "Serialization Gadgets"
9.8
First published (updated )
redhat/camelApache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.2…
9.8
First published (updated )
Oracle Communications Diameter Intelligence HubInput Validation
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache CamelApache Camel RabbitMQ enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, …
9.8
First published (updated )
Oracle Retail Integration BusLast updated 24 July 2024
6.5
First published (updated )
Oracle Retail Order Broker Cloud ServiceImproper validation of certificate with host mismatch in Apache Log4j SMTP appender prior to version…
4.3
First published (updated )
Oracle Primavera UnifierA carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or c…
5.5
First published (updated )
Oracle Business Process Management SuiteA carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in ver…
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle Business Process Management SuiteA carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser …
5.5
First published (updated )
Oracle Insurance Policy Administration J2EECSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux
5.3
First published (updated )
redhat/eap7-apache-cxfApache CXF could allow a remote attacker to obtain sensitive information, caused by a flaw when ship…
7.5
First published (updated )
Oracle Insurance Policy Administration J2EERFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application
8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache CXFApache CXF is vulnerable to a denial of service, caused by the failure to restrict the number of mes…
6.5
First published (updated )
redhat/cxfA flaw was found in cxf in versions prior to 3.2.11 and 3.3.4. The access token services do not prop…
9.8
First published (updated )
Oracle Banking PlatformOracle ADF Faces Deserialization of Untrusted Data Remote Code Execution Vulnerability
9.8
First published (updated )
Apache TomEEThe ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory all…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.