Oracle Sd-wan Edge vulnerabilities

• vmware spring cloud function, vmware tanzu spring cloud, oracle banking branch +26 more +28 more Spring Cloud Function Code Injection with a specially crafted SpEL as a routing expression CVE-2022-22963 In KEVPublic exploitFix available EPSS 99.9% 9.8 CriticalApril 1, 2022
• vmware spring framework, cisco cx cloud agent, oracle commerce platform +35 more +37 more Remote Code Execution in Spring Framework CVE-2022-22965 In KEVPublic exploitFix available EPSS 99.6% 9.8 CriticalMarch 31, 2022
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +33 more +35 more Deeply nested json in jackson-databind CVE-2020-36518 Public exploitFix available 7.5 HighMarch 11, 2022
• apache tomcat, debian linux, netapp hci +15 more +17 more DoS via memory leak with WebSocket connections CVE-2021-42340 Fix available EPSS 11.8% 7.5 HighOctober 14, 2021
• apache tomcat, tomee, debian linux +19 more +21 more Incorrect Transfer-Encoding handling with HTTP/1.0 CVE-2021-33037 Fix available EPSS 74.7% 5.3 MediumJuly 12, 2021
• fasterxml jackson-databind, debian linux, netapp service level manager +23 more +25 more Serialization gadgets exploit in jackson-databind CVE-2020-35491 Fix available 8.1 HighDecember 17, 2020
• apache tomcat, debian linux, netapp element plug-in +9 more +11 more Apache Tomcat: Request header mix-up between HTTP/2 streams CVE-2020-17527 Public exploitFix available EPSS 24.6% 7.5 HighDecember 3, 2020
• apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 more XML External Entity (XXE) Injection in Jackson Databind CVE-2020-25649 Fix available EPSS 17.7% 7.5 HighOctober 14, 2020
• apache tomcat, debian linux, oracle instantis enterprisetrack +1 more +3 more Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2020-13943 Fix available EPSS 52.6% 4.3 MediumOctober 12, 2020
• linux kernel, canonical ubuntu linux, opensuse leap +2 more +4 more In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions... CVE-2020-24394 Fix available 7.1 HighAugust 19, 2020
• debian linux, linux kernel, canonical ubuntu linux +12 more +14 more The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain... CVE-2020-16166 Fix available 3.7 LowJuly 30, 2020
• oracle sd-wan edge Vulnerability in the Oracle SD-WAN Edge product of Oracle Communications Applications (component:... CVE-2020-14606 10.0 CriticalJuly 15, 2020
• perl, fedoraproject fedora, netapp oncommand workflow automation +16 more +18 more CVE-2020-12723 does not affect BellSoft software CVE-2020-12723 Fix available 7.5 HighJune 1, 2020
• perl, fedoraproject fedora, opensuse leap +15 more +17 more CVE-2020-10543 does not affect BellSoft software CVE-2020-10543 Fix available EPSS 11.3% 8.2 HighJune 1, 2020
• debian linux, linux kernel, canonical ubuntu linux +21 more +23 more An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md... CVE-2020-12771 Fix available 5.5 MediumMay 9, 2020
• debian linux, linux kernel, canonical ubuntu linux +13 more +15 more An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3.... CVE-2019-5108 Fix available EPSS 10.1% 7.4 HighDecember 23, 2019
• debian linux, linux kernel, canonical ubuntu linux +11 more +13 more kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with... CVE-2019-19922 Fix available 5.5 MediumDecember 22, 2019
• debian linux, linux kernel, opensuse leap +1 more +3 more In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB... CVE-2019-19535 Fix available 4.6 MediumDecember 3, 2019
• linux kernel, broadcom brocade fabric operating system firmware, canonical ubuntu linux +15 more +17 more Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in... CVE-2019-19063 Fix available 4.6 MediumNovember 18, 2019
• debian linux, linux kernel, broadcom brocade fabric operating system firmware +15 more +17 more A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel... CVE-2019-19052 Fix available 7.5 HighNovember 18, 2019
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• debian linux, linux kernel, canonical ubuntu linux +25 more +27 more An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way... CVE-2019-14821 Fix available 7.5 HighSeptember 19, 2019
• debian linux, linux kernel, canonical ubuntu linux +7 more +9 more An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference... CVE-2019-15218 Fix available 4.6 MediumAugust 19, 2019
• gnome pango, canonical ubuntu linux, debian linux +10 more +12 more Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer... CVE-2019-1010238 Fix available 9.8 CriticalJuly 19, 2019
• debian linux, linux kernel, canonical ubuntu linux +11 more +13 more An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and... CVE-2019-3900 Fix available 6.3 MediumApril 25, 2019