Communications Operations Monitor (Oracle) - vulnerabilities (CVEs)

45 CVEs, 0 in the last 30 days, 10 known versions, newest CVE from 2022-04-27. Vendor: Oracle.

CVEs of Communications Operations Monitor

CVE-2022-24736 - CVSS 5.5 (medium), 2022-04-27: Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can…
CVE-2022-24735 - CVSS 7.8 (high), 2022-04-27: Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis prior…
CVE-2022-21396 - CVSS 5.4 (medium), 2022-01-19: Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are…
CVE-2022-21399 - CVSS 6.6 (medium), 2022-01-19: Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are…
CVE-2022-21402 - CVSS 4.8 (medium), 2022-01-19: Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are…
CVE-2022-21395 - CVSS 7.2 (high), 2022-01-19: Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are…
CVE-2022-21398 - CVSS 5.4 (medium), 2022-01-19: Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are…
CVE-2022-21401 - CVSS 6.6 (medium), 2022-01-19: Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are…
CVE-2022-21397 - CVSS 5.4 (medium), 2022-01-19: Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are…
CVE-2022-21400 - CVSS 5.4 (medium), 2022-01-19: Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are…
CVE-2022-21403 - CVSS 6.6 (medium), 2022-01-19: Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are…
CVE-2022-21246 - CVSS 5.4 (medium), 2022-01-19: Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are…
CVE-2021-44224 - CVSS 8.2 (high), 2021-12-20: A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing…
CVE-2021-44790 - CVSS 9.8 (critical), 2021-12-20: A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is…
CVE-2021-41182 - CVSS 6.5 (medium), 2021-10-26: jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from…
CVE-2021-41184 - CVSS 6.5 (medium), 2021-10-26: jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from…
CVE-2021-41183 - CVSS 6.5 (medium), 2021-10-26: jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from…
CVE-2021-41099 - CVSS 7.5 (high), 2021-10-04: Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the underlying string library can be used to corrupt the heap…
CVE-2021-32762 - CVSS 8.8 (high), 2021-10-04: Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnerable to integer…
CVE-2021-32628 - CVSS 7.5 (high), 2021-10-04: Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure used by all versions of Redis can be…
CVE-2021-32687 - CVSS 7.5 (high), 2021-10-04: Redis is an open source, in-memory database that persists on disk. An integer overflow bug affecting all versions of Redis can be exploited to corrupt the…
CVE-2021-32627 - CVSS 7.5 (high), 2021-10-04: Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt the heap…
CVE-2021-32675 - CVSS 7.5 (high), 2021-10-04: Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol (RESP) request, Redis allocates memory…
CVE-2021-32626 - CVSS 8.8 (high), 2021-10-04: Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the…
CVE-2021-32672 - CVSS 5.3 (medium), 2021-10-04: Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the…
CVE-2021-23017 - CVSS 7.7 (high), 2021-06-01: A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory…
CVE-2020-14147 - CVSS 7.7 (high), 2020-06-15: An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis…
CVE-2020-11023 - CVSS 6.9 (medium), 2020-04-29: In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing…
CVE-2019-10219 - CVSS 6.5 (medium), 2019-11-08: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious…
CVE-2019-15165 - CVSS 5.3 (medium), 2019-10-03: sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
CVE-2019-5482 - CVSS 9.8 (critical), 2019-09-16: Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
CVE-2019-5481 - CVSS 9.8 (critical), 2019-09-16: Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
CVE-2019-16056 - CVSS 7.5 (high), 2019-09-06: An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email…
CVE-2019-10193 - CVSS 7.2 (high), 2019-07-11: A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By…
CVE-2019-10192 - CVSS 7.2 (high), 2019-07-11: A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By…
CVE-2019-11358 - CVSS 6.1 (medium), 2019-04-20: jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an…
CVE-2019-7164 - CVSS 9.8 (critical), 2019-02-20: SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
CVE-2019-7548 - CVSS 7.8 (high), 2019-02-06: SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.
CVE-2019-3823 - CVSS 7.5 (high), 2019-02-06: libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer…
CVE-2019-3822 - CVSS 9.8 (critical), 2019-02-06: libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3 header…
CVE-2018-16890 - CVSS 7.5 (high), 2019-02-06: libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling incoming NTLM type-2 messages…
CVE-2018-11219 - CVSS 9.8 (critical), 2018-06-17: An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading…
CVE-2018-11218 - CVSS 9.8 (critical), 2018-06-17: Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of…
CVE-2017-3730 - CVSS 7.5 (high), 2017-05-04: In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to…
CVE-2016-3513 - CVSS 6.5 (medium), 2016-07-21: Unspecified vulnerability in the Oracle Communications Operations Monitor component in Oracle Communications Applications before 3.3.92.0.0 allows remote…