Skip to contentOracle Communications Diameter Signaling Router vulnerabilities
- apache log4j, apache software foundation log4j2, cisco cloudcenter +20 more +22 moreApache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configurationCVE-2021-44832Public exploitFix availableEPSS 97.9%6.6 Medium
- apache log4j, apache software foundation log4j2, debian linux +114 more +116 moreApache Log4j2 does not always protect from infinite recursion in lookup evaluationCVE-2021-45105Public exploitFix availableEPSS 100.0%5.9 Medium
- php, debian linux, fedoraproject fedora +2 more +4 morePHP-FPM memory access in root process leading to privilege escalationCVE-2021-21703Fix available7.8 High
- apache tomcat, debian linux, netapp hci +15 more +17 moreDoS via memory leak with WebSocket connectionsCVE-2021-42340Fix availableEPSS 11.8%7.5 High
- debian linux, netapp oncommand insight, netty +9 more +11 moreSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary wayCVE-2021-37137Fix available7.5 High
- debian linux, netapp oncommand insight, netty +16 more +18 moreBzip2Decoder doesn't allow setting size restrictions for decompressed dataCVE-2021-37136Fix available7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, netapp e-series santricity os controller +16 more +18 moreEncoded URIs can access WEB-INF directory in Eclipse JettyCVE-2021-34429Public exploitFix availableEPSS 99.3%5.3 Medium
- apache tomcat, tomee, debian linux +19 more +21 moreIncorrect Transfer-Encoding handling with HTTP/1.0CVE-2021-33037Fix availableEPSS 74.7%5.3 Medium
- apache tomcat, debian linux, oracle communications cloud native core policy +4 more +6 moreAuth weakness in JNDIRealmCVE-2021-30640Fix available6.5 Medium
- genivia gsoap, oracle communications diameter signaling router, communications eagle application processor +3 more +5 moreA code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP...CVE-2021-21783Fix available9.8 Critical
- php, debian linux, netapp clustered data ontap +1 more +3 moreNull Dereference in SoapClientCVE-2021-21702Fix available5.3 Medium
- fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 moreUnsafe Deserialization in jackson-databindCVE-2020-36179Public exploitFix availableEPSS 17.1%8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36180Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36182Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36184Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +37 more +39 moreUnsafe Deserialization in jackson-databindCVE-2020-36189Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 moreUnsafe Deserialization in jackson-databindCVE-2020-36181Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +22 more +24 moreSerialization gadgets exploit in jackson-databindCVE-2020-35490Fix available8.1 High
- apache groovy, atlas, netapp snapcenter +18 more +20 moreInformation Disclosure in Apache GroovyCVE-2020-17521Fix available5.5 Medium
- oracle communications diameter signaling router, oracle corporation communications diameter signaling router (dsr) +1 moreVulnerability in the Oracle Communications Diameter Signaling Router (DSR) product of Oracle...CVE-2020-147886.1 Medium
- oracle communications diameter signaling router, oracle corporation communications diameter signaling router (dsr) +1 moreVulnerability in the Oracle Communications Diameter Signaling Router (DSR) product of Oracle...CVE-2020-147875.4 Medium
- php, canonical ubuntu linux, debian linux +5 more +7 moreWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IVCVE-2020-7069Fix available5.4 Medium
- fasterxml jackson-databind, debian linux, oracle agile product lifecycle management +23 more +25 moreUnsafe Deserialization in jackson-databindCVE-2020-24750Public exploitFix available8.1 High
- apache activemq, oracle communications diameter signaling router, communications element manager +4 more +6 moreRemote code execution in Apache ActiveMQCVE-2020-11998Public exploitFix availableEPSS 48.9%9.8 Critical
- apache activemq, debian linux, oracle communications diameter signaling router +1 more +3 moreImproper Authentication in Apache ActiveMQCVE-2020-13920Fix available5.9 Medium
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 moreCode Injection in jackson-databindCVE-2020-24616Public exploitFix available8.1 High
- isc bind, canonical ubuntu linux, debian linux +6 more +8 moreA truncated TSIG response can lead to an assertion failureCVE-2020-8622Fix available6.5 Medium
- apache camel, oracle communications diameter signaling router, enterprise manager base platform +1 more +3 moreServer side template injection in Apache CamelCVE-2020-11994Fix available7.5 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +11 more +13 moreDeserialization of untrusted data in Jackson DatabindCVE-2020-14195Public exploitFix available8.1 High
- fasterxml jackson-databind, netapp active iq unified manager, steelstore cloud integrated storage +9 more +11 moreDeserialization of untrusted data in Jackson DatabindCVE-2020-14060Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +12 more +14 moreDeserialization of untrusted data in Jackson DatabindCVE-2020-14061Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +10 more +12 moreDeserialization of untrusted data in Jackson DatabindCVE-2020-14062Fix available8.1 High
- perl, fedoraproject fedora, netapp oncommand workflow automation +16 more +18 moreCVE-2020-12723 does not affect BellSoft softwareCVE-2020-12723Fix available7.5 High
- perl, fedoraproject fedora, netapp oncommand workflow automation +17 more +19 moreCVE-2020-10878 does not affect BellSoft softwareCVE-2020-10878Fix available8.6 High
- perl, fedoraproject fedora, opensuse leap +15 more +17 moreCVE-2020-10543 does not affect BellSoft softwareCVE-2020-10543Fix availableEPSS 11.3%8.2 High
- apache activemq, oracle communications diameter signaling router, communications element manager +4 more +6 moreApache ActiveMQ webconsole admin GUI is open to XSSCVE-2020-1941Fix available6.1 Medium
- apache camel, oracle communications diameter signaling router, enterprise manager base platform +1 more +3 moreDeserialization of Untrusted Data in Apache Camel RabbitMQCVE-2020-11972Fix available9.8 Critical
- apache camel, oracle communications diameter signaling router, enterprise manager base platform +1 more +3 moreApache Camel Netty enables Java deserialization by defaultCVE-2020-11973Fix available9.8 Critical
- apache camel, oracle communications diameter intelligence hub, communications diameter signaling router +2 more +4 moreImproper Input Validation in Apache CamelCVE-2020-11971Fix availableEPSS 14.0%7.5 High
- apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 moreSensitive Data Exposure in Apache AntCVE-2020-1945Fix available6.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +23 more +25 morePotential remote code execution in Apache TomcatCVE-2020-9484Public exploitFix availableEPSS 55.5%7.0 High
- jquery, debian linux, drupal +67 more +69 morejQuery has a potential XSS vulnerabilityCVE-2020-11022Public exploitFix availableEPSS 99.2%6.9 Medium
- dom4j project dom4j, canonical ubuntu linux, netapp oncommand api services +35 more +37 moredom4j allows External Entities by default which might enable XXE attacksCVE-2020-10683Fix available9.8 Critical
- php, debian linux, oracle communications diameter signaling router +1 more +3 moreOOB Read in urldecode()CVE-2020-7067Fix available7.5 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +18 more +20 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11619Fix available8.1 High
- apache cxf, netapp oncommand workflow automation, snapmanager +7 more +9 moreApache CXF JMX Integration is vulnerable to a MITM attackCVE-2020-1954Fix available5.3 Medium
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11111Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11112Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +30 more +32 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11113Public exploitFix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10968Fix available8.8 High
- Show olderLoading…