Oracle Communications Webrtc Session Controller vulnerabilities

• apache log4j, apache software foundation log4j2, debian linux +114 more +116 more Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• jquery, debian linux, drupal +67 more +69 more jQuery has a potential XSS vulnerability CVE-2020-11022 Public exploitFix available EPSS 99.2% 6.9 MediumApril 29, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• backdropcms backdrop, drupal, jquery +102 more +104 more XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019
• oracle weblogic server, banking platform, business process management suite +6 more +8 more Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:... CVE-2018-3246 7.5 HighOctober 17, 2018
• bouncycastle bc-java, netapp oncommand workflow automation, opensuse leap +21 more +23 more Deserialization of Untrusted Data in Bouncy castle CVE-2018-1000613 Fix available 9.8 CriticalJuly 9, 2018
• bouncycastle bc-java, fips java api, debian linux +17 more +19 more Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator CVE-2018-1000180 Fix available 7.5 HighJune 5, 2018
• apache batik, canonical ubuntu linux, debian linux +18 more +20 more Deserialization of Untrusted Data in Apache Batik CVE-2018-8013 Fix available EPSS 18.6% 9.8 CriticalMay 23, 2018
• haxx curl, canonical ubuntu linux, debian linux +6 more +8 more curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read... CVE-2018-1000301 Fix available 9.1 CriticalMay 16, 2018
• haxx curl, canonical ubuntu linux, debian linux +6 more +8 more A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling... CVE-2018-1000122 Fix available 9.1 CriticalMarch 14, 2018
• haxx curl, canonical ubuntu linux, debian linux +6 more +8 more A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code... CVE-2018-1000121 Fix available 7.5 HighMarch 14, 2018
• haxx curl, canonical ubuntu linux, debian linux +6 more +8 more curl FTP path confusion leads to NIL byte out of bounds write CVE-2018-1000120 Fix available EPSS 11.6% 9.8 CriticalMarch 14, 2018
• jquery, oracle agile product lifecycle management for process, banking platform +44 more +46 more Cross-Site Scripting (XSS) in jquery CVE-2015-9251 Public exploitFix available EPSS 29.7% 6.1 MediumJanuary 18, 2018
• oracle communications webrtc session controller Vulnerability in the Oracle Communications WebRTC Session Controller component of Oracle... CVE-2017-10153 6.3 MediumOctober 19, 2017
• apache log4j, netapp oncommand api services, oncommand insight +76 more +78 more Deserialization of Untrusted Data in Log4j CVE-2017-5645 Public exploitFix available EPSS 89.4% 9.8 CriticalApril 17, 2017
• openssl, apple mac os x, canonical ubuntu linux +21 more +23 more The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0... CVE-2015-3195 Public exploitFix available EPSS 38.7% 5.3 MediumDecember 3, 2015
• gnu glibc, apple mac os x, debian linux +14 more +16 more Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x... CVE-2015-0235 Public exploitFix available EPSS 94.6% 10.0 HighSeptember 13, 2013