Latest oracle nosql database Vulnerabilities

● CVE-2021-21409

### Impact The content-length header is not correctly validated if the request only use a single Http2HeaderFrame with the endStream set to to true. This could lead to request smuggling if the request...

maven/io.netty:netty<4.0.0

maven/org.jboss.netty:netty<4.0.0

maven/io.netty:netty-codec-http2>=4.0.0<4.1.61.Final

redhat/qpid-proton<0:0.33.0-6.el7_9

redhat/qpid-proton<0:0.33.0-8.el8

redhat/eap7-elytron-web<0:1.6.3-1.Final_redhat_00001.1.el6ea

and 75 more

● CVE-2021-22883

Node.js is vulnerable to a denial of service, caused by a file descriptor leak. By making multiple attempts to connect with an 'unknownProtocol', an attacker could exploit this vulnerability to lead t...

redhat/rh-nodejs10-nodejs<0:10.24.0-1.el7

redhat/rh-nodejs14-nodejs<0:14.16.0-1.el7

redhat/rh-nodejs12-nodejs<0:12.21.0-1.el7

ubuntu/nodejs<10.19.0~dfsg-3ubuntu1.2

ubuntu/nodejs<12.21.0~dfsg-1

Nodejs Node.js>=10.0.0<10.24.0

and 17 more

● CVE-2021-22884

Node.js is vulnerable to a denial of service, caused by an error when the whitelist includes "localhost6". By controlling the victim's DNS server or spoofing its responses, an attacker could exploit t...

ubuntu/nodejs<8.10.0~dfsg-2ubuntu0.4+

ubuntu/nodejs<10.19.0~dfsg-3ubuntu1.2

ubuntu/nodejs<12.21.0~dfsg-1

debian/nodejs

redhat/rh-nodejs10-nodejs<0:10.24.0-1.el7

redhat/rh-nodejs14-nodejs<0:14.16.0-1.el7

and 27 more

● CVE-2021-23840

OpenSSL is vulnerable to a denial of service, caused by an integer overflow in CipherUpdate. By sending an overly long argument, an attacker could exploit this vulnerability to cause the application t...

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 86 more

● CVE-2021-21290

### Impact When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. The CVSSv3.1 ...

maven/io.netty:netty<4.0.0

maven/org.jboss.netty:netty<4.0.0

maven/io.netty:netty-codec-http>=4.0.0<4.1.59.Final

redhat/qpid-proton<0:0.33.0-6.el7_9

redhat/qpid-proton<0:0.33.0-8.el8

redhat/eap7-artemis-wildfly-integration<0:1.0.4-1.redhat_00001.1.el6ea

and 91 more

● CVE-2020-13956

Apache HttpClient could allow a remote attacker to bypass security restrictions, caused by the improper handling of malformed authority component in request URIs. By passing request URIs to the librar...

redhat/eap7-activemq-artemis<0:2.9.0-7.redhat_00017.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.9-12.SP13_redhat_00001.1.el6ea

redhat/eap7-hal-console<0:3.2.12-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.20-1.Final_redhat_00001.1.el6ea

redhat/eap7-httpcomponents-client<0:4.5.13-1.redhat_00001.1.el6ea

redhat/eap7-jboss-ejb-client<0:4.0.37-1.Final_redhat_00001.1.el6ea

and 88 more

● CVE-2020-8908

A flaw was found in Guava that creates temporary directories with default permissions similar to /tmp. This issue may allow local users access, possibly permitting information exposure.

redhat/eap7-activemq-artemis<0:2.9.0-9.redhat_00019.1.el6ea

redhat/eap7-bouncycastle<0:1.68.0-1.redhat_00001.1.el6ea

redhat/eap7-guava-failureaccess<0:1.0.1-1.redhat_00002.1.el6ea

redhat/eap7-guava-libraries<0:30.1.0-1.redhat_00001.1.el6ea

redhat/eap7-hal-console<0:3.2.13-1.Final_redhat_00001.1.el6ea

redhat/eap7-ironjacamar<0:1.4.27-1.Final_redhat_00001.1.el6ea

and 69 more

● CVE-2020-11612

The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server...

redhat/qpid-cpp<0:1.36.0-30.el6_10a

redhat/qpid-proton<0:0.31.0-3.el6_10

redhat/qpid-cpp<0:1.36.0-30.el7a

redhat/qpid-proton<0:0.31.0-3.el7

redhat/nodejs-rhea<0:1.0.21-1.el8

redhat/qpid-cpp<0:1.39.0-5.el8a

and 72 more

● CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This...

redhat/eap7-apache-cxf<0:3.2.11-1.redhat_00001.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-6.SP3_redhat_00004.1.el6ea

redhat/eap7-hal-console<0:3.0.19-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.14-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate-validator<0:6.0.18-1.Final_redhat_00001.1.el6ea

redhat/eap7-jackson-annotations<0:2.9.10-1.redhat_00003.1.el6ea

and 795 more

● CVE-2018-14718

FasterXML jackson-databind 2.x before 2.9.7, 2.8.11.3, 2.7.9.5, and 2.6.7.3 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic d...

maven/com.fasterxml.jackson.core:jackson-databind>=2.0.0<2.6.7.3

maven/com.fasterxml.jackson.core:jackson-databind>=2.7.0<=2.7.9.4

maven/com.fasterxml.jackson.core:jackson-databind>=2.8.0<=2.8.11.2

maven/com.fasterxml.jackson.core:jackson-databind>=2.9.0<2.9.7

IBM GDE<=3.0.0.2

FasterXML jackson-databind>=2.0.0<2.6.7.3

and 58 more

● CVE-2018-1000873

Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be...

IBM GDE<=3.0.0.2

redhat/jackson-modules-java8<2.9.8

Fasterxml Jackson-modules-java8<2.9.8

Oracle Clusterware=12.1.0.2.0

Oracle Database Server=12.1.0.2

Oracle Database Server=12.2.0.1

and 9 more

Latest oracle nosql database Vulnerabilities

Company

Resources

Contact