Oracle Communications Eagle vulnerabilities

• apache chainsaw, log4j, apache software foundation log4j 1.x +24 more +26 more A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. CVE-2022-23307 Fix available EPSS 54.4% 8.8 HighJanuary 18, 2022
• apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +26 more +28 more SQL injection in JDBC Appender in Apache Log4j V1 CVE-2022-23305 Public exploitFix available EPSS 66.5% 9.8 CriticalJanuary 18, 2022
• apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +24 more +26 more Deserialization of untrusted data in JMSSink in Apache Log4j 1.x CVE-2022-23302 Fix available EPSS 63.8% 8.8 HighJanuary 18, 2022
• apache log4j, apache software foundation log4j2, debian linux +114 more +116 more Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 more Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• windriver vxworks, oracle communications eagle +1 more An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer... CVE-2020-35198 9.8 CriticalMay 12, 2021
• genivia gsoap, oracle communications diameter signaling router, communications eagle application processor +3 more +5 more A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP... CVE-2021-21783 Fix available 9.8 CriticalMarch 25, 2021
• windriver vxworks, oracle communications eagle +1 more integer overflow in calloc CVE-2020-28895 7.3 HighFebruary 3, 2021
• perl, fedoraproject fedora, netapp oncommand workflow automation +16 more +18 more CVE-2020-12723 does not affect BellSoft software CVE-2020-12723 Fix available 7.5 HighJune 1, 2020
• perl, fedoraproject fedora, netapp oncommand workflow automation +17 more +19 more CVE-2020-10878 does not affect BellSoft software CVE-2020-10878 Fix available 8.6 HighJune 1, 2020
• perl, fedoraproject fedora, opensuse leap +15 more +17 more CVE-2020-10543 does not affect BellSoft software CVE-2020-10543 Fix available EPSS 11.3% 8.2 HighJune 1, 2020
• jquery, debian linux, drupal +49 more +51 more Potential XSS vulnerability in jQuery CVE-2020-11023 In KEVPublic exploitFix available EPSS 84.9% 6.9 MediumApril 29, 2020
• jquery, debian linux, drupal +67 more +69 more jQuery has a potential XSS vulnerability CVE-2020-11022 Public exploitFix available EPSS 99.2% 6.9 MediumApril 29, 2020
• apache log4j, debian linux, oracle communications application session controller +43 more +45 more Improper validation of certificate with host mismatch in Apache Log4j SMTP appender CVE-2020-9488 Public exploitFix available 3.7 LowApril 27, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +10 more +12 more Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of... CVE-2019-12261 9.8 CriticalAugust 9, 2019
• windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +10 more +12 more Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is... CVE-2019-12260 EPSS 23.2% 9.8 CriticalAugust 9, 2019
• backdropcms backdrop, drupal, jquery +102 more +104 more XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019
• oracle corporation communications eagle lnp application processor, oracle communications eagle local number portability application processor +1 more Vulnerability in the Oracle Communications EAGLE LNP Application Processor component of Oracle... CVE-2018-2904 6.5 MediumJuly 18, 2018
• arm cortex-a, cortex-r, fujitsu m12-1 firmware +223 more +225 more Systems with microprocessors utilizing speculative execution and branch prediction may allow... CVE-2018-3693 Fix available 5.6 MediumJuly 10, 2018
• debian linux, linux kernel, canonical ubuntu linux +9 more +11 more The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write... CVE-2018-7566 Fix available 7.8 HighMarch 28, 2018
• openssl, oracle agile engineering data management, communications application session controller +4 more +6 more Bad (EC)DHE parameters cause a client crash CVE-2017-3730 Public exploitFix available EPSS 55.3% 7.5 HighMay 4, 2017
• oracle communications eagle application processor Unspecified vulnerability in the Oracle Communications EAGLE Application Processor component in... CVE-2016-5458 6.4 MediumJuly 21, 2016
• gnu glibc, apple mac os x, debian linux +14 more +16 more Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x... CVE-2015-0235 Public exploitFix available EPSS 94.6% 10.0 HighSeptember 13, 2013