Filters

Oracle Retail Xstore Point of ServiceDenial of Service by injecting highly recursive collections or maps in XStream

high
7.5
First published (updated )
CVE-2021-43859

Apache Log4jApache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration

high
8.5
Zeroday
First published (updated )
CVE-2021-44832

Oracle Utilities FrameworkXStream Remote Code Execution Vulnerability

high
8.5
Exploited
First published (updated )
CVE-2021-39144

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

high
8.8
First published (updated )
CVE-2021-39139

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

high
8.5
First published (updated )
CVE-2021-39147

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

high
8.5
First published (updated )
CVE-2021-39151

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

high
8.5
First published (updated )
CVE-2021-39148

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

high
8.5
First published (updated )
CVE-2021-39145

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

high
8.5
First published (updated )
CVE-2021-39146

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

high
8.5
First published (updated )
CVE-2021-39149

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Utilities FrameworkA Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling

high
8.5
First published (updated )
CVE-2021-39150

Oracle Utilities FrameworkA Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling

high
8.5
First published (updated )
CVE-2021-39152

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

high
8.5
First published (updated )
CVE-2021-39154

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

high
8.5
First published (updated )
CVE-2021-39141

Oracle Utilities FrameworkXStream can cause a Denial of Service

medium
6.5
First published (updated )
CVE-2021-39140

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Banking Digital ExperienceVulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versi…

high
8.3
First published (updated )
CVE-2021-2351

Oracle Utilities FrameworkApache Ant ZIP, and ZIP based, archive denial of service vulerability

medium
5.5
First published (updated )
CVE-2021-36374

Oracle Utilities FrameworkApache Ant TAR archive denial of service vulnerability

medium
5.5
First published (updated )
CVE-2021-36373

Oracle Communications Unified Inventory ManagementXStream is vulnerable to a Remote Command Execution attack

high
8.8
First published (updated )
CVE-2021-29505

Oracle Banking ApisPossible limited path traversal vulnerabily in Apache Commons IO

medium
5.8
First published (updated )
CVE-2021-29425

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Retail Xstore Point of ServiceA carefully crafted PDF file can trigger an infinite loop while loading the file

medium
5.5
First published (updated )
CVE-2021-27807

Oracle Retail Xstore Point of ServiceA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file

medium
5.5
First published (updated )
CVE-2021-27906

Oracle Communications Unified Inventory ManagementXStream is vulnerable to a Remote Command Execution attack

critical
9.9
First published (updated )
CVE-2021-21345

Oracle Communications Unified Inventory ManagementXStream can cause a Denial of Service

high
7.5
First published (updated )
CVE-2021-21341

Oracle Communications Unified Inventory ManagementA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

high
8.6
First published (updated )
CVE-2021-21349

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights

high
7.5
First published (updated )
CVE-2021-21343

Oracle Communications Unified Inventory ManagementA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

critical
9.1
First published (updated )
CVE-2021-21342

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

critical
9.8
First published (updated )
CVE-2021-21350

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)

high
7.8
First published (updated )
CVE-2021-21348

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

critical
9.8
First published (updated )
CVE-2021-21346

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

critical
9.8
First published (updated )
CVE-2021-21347

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

critical
9.8
First published (updated )
CVE-2021-21344

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

critical
9.1
First published (updated )
CVE-2021-21351

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36180

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36182

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36183

Oracle Primavera GatewayFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36179

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36181

Oracle Banking PlatformFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36189

Oracle Primavera GatewayA flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gad…

high
8.1
First published (updated )
CVE-2020-35728

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36188

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36185

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36186

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36184

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36187

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Banking PlatformFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

high
8.1
First published (updated )
CVE-2020-35490

Oracle Banking PlatformFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

high
8.1
First published (updated )
CVE-2020-35491

Oracle Retail Xstore Point of ServiceRemote Code Execution in XStream

critical
9.3
First published (updated )
CVE-2020-26217

Oracle Retail Xstore Point of ServiceBuffer Overflow

high
7.5
First published (updated )
CVE-2020-8277

Oracle Banking PlatformCode Injection

high
7.5
First published (updated )
CVE-2020-11979

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203