Oracle Communications Cloud Native Core Policy vulnerabilities

• oracle mysql connectors, netapp active iq unified manager, oncommand insight +3 more +5 more Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). ... CVE-2023-21971 Public exploitFix available 5.3 MediumApril 18, 2023
• oracle corporation communications brm - elastic charging engine, oracle communications billing and revenue management elastic charging engine, communications cloud native core binding support function +1 more +3 more Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle... CVE-2023-21824 4.4 MediumJanuary 17, 2023
• vmware spring cloud function, vmware tanzu spring cloud, oracle banking branch +26 more +28 more Spring Cloud Function Code Injection with a specially crafted SpEL as a routing expression CVE-2022-22963 In KEVPublic exploitFix available EPSS 99.9% 9.8 CriticalApril 1, 2022
• vmware spring framework, cisco cx cloud agent, oracle commerce platform +35 more +37 more Remote Code Execution in Spring Framework CVE-2022-22965 In KEVPublic exploitFix available EPSS 99.6% 9.8 CriticalMarch 31, 2022
• intel atom c3308, atom c3336, atom c3338 +501 more +503 more Important: kernel security, bug fix, and enhancement update CVE-2022-0002 Fix available 6.5 MediumMarch 8, 2022
• intel atom p5921b, atom p5931b, atom p5942b +455 more +457 more Important: kernel security, bug fix, and enhancement update CVE-2022-0001 Public exploitFix available 6.5 MediumMarch 8, 2022
• debian linux, linux kernel, netapp h300e +10 more +12 more net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain... CVE-2022-25636 Public exploitFix available 7.8 HighFebruary 22, 2022
• fedoraproject fedora, linux kernel, oracle communications cloud native core binding support function +3 more +5 more A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint... CVE-2021-3773 Public exploitFix available 9.8 CriticalFebruary 16, 2022
• linux kernel, oracle communications cloud native core binding support function, communications cloud native core network exposure function +1 more +3 more A flaw was found in the Linux kernel. A null pointer dereference in bond_ipsec_add_sa() may lead... CVE-2022-0286 Fix available 5.5 MediumJanuary 31, 2022
• apache tomcat, debian linux, oracle agile engineering data management +4 more +6 more Local privilege escalation with FileStore CVE-2022-23181 Fix available 7.0 HighJanuary 27, 2022
• linux kernel, fedoraproject fedora, oracle communications cloud native core binding support function +2 more +4 more A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP... CVE-2022-0322 Fix available 5.5 MediumJanuary 25, 2022
• linux kernel, netapp a700s firmware, active iq unified manager +13 more +15 more A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED... CVE-2021-4203 Fix available 6.8 MediumJanuary 22, 2022
• google protobuf-java, google-protobuf, google-protobuf [jruby gem] +5 more +7 more Denial of Service of protobuf-java parsing procedure CVE-2021-22569 Public exploitFix available 7.5 HighJanuary 7, 2022
• h2database h2, debian linux, oracle communications cloud native core policy +2 more RCE in H2 Console CVE-2021-42392 Public exploitFix available EPSS 83.2% 9.8 CriticalJanuary 6, 2022
• linux kernel, netapp aff a400 firmware, all flash fabric-attached storage 8300 firmware +23 more +25 more In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an... CVE-2021-45485 Public exploitFix available 7.5 HighDecember 25, 2021
• linux kernel, oracle communications cloud native core binding support function, communications cloud native core network exposure function +1 more +3 more In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information... CVE-2021-45486 Fix available 3.5 LowDecember 25, 2021
• debian linux, linux kernel, netapp h300e firmware +12 more +14 more A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain... CVE-2021-4083 Fix available 7.0 HighDecember 21, 2021
• apache log4j, apache software foundation log4j2, debian linux +114 more +116 more Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• numpy, oracle communications cloud native core policy +1 more Incorrect Comparison in NumPy CVE-2021-34141 Fix available 5.3 MediumDecember 17, 2021
• lxml, debian linux, fedoraproject fedora +8 more +10 more HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818 Fix available 8.2 HighDecember 13, 2021
• netty, debian linux, netapp oncommand workflow automation +15 more +17 more HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling CVE-2021-43797 Fix available 6.5 MediumDecember 9, 2021
• debian linux, linux kernel, fedoraproject fedora +3 more +5 more A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user... CVE-2021-4002 Fix available 4.4 MediumNovember 26, 2021
• debian linux, linux kernel, fedoraproject fedora +12 more +14 more In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb... CVE-2021-43976 Fix available 4.6 MediumNovember 17, 2021
• debian linux, linux kernel, oracle communications cloud native core binding support function +3 more +5 more An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds... CVE-2021-43389 Fix available 5.5 MediumNovember 4, 2021
• linux kernel, fedoraproject fedora, oracle communications cloud native core binding support function +2 more +4 more A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose()... CVE-2020-27820 Fix available 4.7 MediumNovember 2, 2021
• oracle outside in technology, communications cloud native core policy +1 more Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component:... CVE-2021-35574 7.5 HighOctober 20, 2021
• oracle mysql connectors, communications cloud native core console, communications cloud native core network slice selection function +3 more +5 more Incorrect Authorization in MySQL Connector Java CVE-2021-2471 Public exploitFix available 5.9 MediumOctober 20, 2021
• debian linux, linux kernel, fedoraproject fedora +5 more +7 more The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to... CVE-2021-42739 Fix available 6.7 MediumOctober 20, 2021
• debian linux, linux kernel, fedoraproject fedora +18 more +20 more A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the... CVE-2021-20322 Fix available 7.4 HighOctober 19, 2021
• apache kafka, oracle communications brm - elastic charging engine, communications cloud native core policy +5 more +7 more Timing Attack Vulnerability for Apache Kafka Connect and Clients CVE-2021-38153 Fix available 5.9 MediumSeptember 22, 2021
• ansi-regex project ansi-regex, chalk chalk/ansi-regex, oracle communications cloud native core policy +2 more Inefficient Regular Expression Complexity in chalk/ansi-regex CVE-2021-3807 Fix available 7.5 HighSeptember 17, 2021
• debian linux, linux kernel, fedoraproject fedora +16 more +18 more A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls... CVE-2021-3752 Fix available 7.1 HighSeptember 17, 2021
• debian linux, linux kernel, fedoraproject fedora +20 more +22 more Important: kernel security, bug fix, and enhancement update CVE-2021-3744 Fix available 5.5 MediumSeptember 15, 2021
• set-value project set-value, oracle communications cloud native core policy +1 more Prototype Pollution CVE-2021-23440 Fix available 7.3 HighSeptember 12, 2021
• debian linux, netapp oncommand insight, netty +16 more +18 more Bzip2Decoder doesn't allow setting size restrictions for decompressed data CVE-2021-37136 Fix available 7.5 HighSeptember 9, 2021
• debian linux, linux kernel, netapp e-series santricity os controller +15 more +17 more A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP... CVE-2021-3772 Fix available 6.5 MediumSeptember 9, 2021
• python, canonical ubuntu linux, fedoraproject fedora +17 more +19 more A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python... CVE-2021-3737 Fix available EPSS 13.2% 7.5 HighAugust 31, 2021
• linux kernel, fedoraproject fedora, netapp h300e firmware +10 more +12 more An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the... CVE-2021-3743 Fix available 7.1 HighAugust 25, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling CVE-2021-39150 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling CVE-2021-39152 Fix available EPSS 11.4% 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream can cause a Denial of Service CVE-2021-39140 Fix available 6.5 MediumAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39149 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39148 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39147 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39146 Fix available EPSS 14.3% 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39145 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39141 Public exploitFix available EPSS 16.1% 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +10 more +12 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39153 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39151 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39139 Fix available 8.5 HighAugust 23, 2021
• Show olderLoading…