Oss Support Tools (Oracle) - vulnerabilities (CVEs)
19 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2022-04-19. Vendor: Oracle.
CVEs of Oss Support Tools
- CVE-2022-21405 - CVSS 5.5 (medium), 2022-04-19: Vulnerability in the OSS Support Tools product of Oracle Support Tools (component: Oracle Explorer). The supported version that is affected is 18.3. Easily…
- CVE-2021-41973 - CVSS 6.5 (medium), 2021-11-01: In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP…
- CVE-2021-2351 - CVSS 8.3 (high), 2021-07-21: Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c.…
- CVE-2021-30129 - CVSS 6.5 (medium), 2021-07-12: A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port…
- CVE-2021-2303 - CVSS 4.9 (medium), 2021-04-22: Vulnerability in the OSS Support Tools product of Oracle Support Tools (component: Diagnostic Assistant). The supported version that is affected is Prior to…
- CVE-2021-29425 - CVSS 6.5 (medium), 2021-04-13: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result…
- CVE-2021-27568 - CVSS 5.9 (medium), 2021-02-23: An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not…
- CVE-2020-11023 - CVSS 6.9 (medium), 2020-04-29: In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing…
- CVE-2019-10219 - CVSS 6.5 (medium), 2019-11-08: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious…
- CVE-2019-5481 - CVSS 9.8 (critical), 2019-09-16: Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
- CVE-2019-5482 - CVSS 9.8 (critical), 2019-09-16: Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
- CVE-2019-5443 - CVSS 7.8 (high), 2019-07-02: A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1…
- CVE-2019-5436 - CVSS 7.8 (high), 2019-05-28: A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
- CVE-2015-9251 - CVSS 6.1 (medium), 2018-01-18: jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing…
- CVE-2018-2615 - CVSS 8.8 (high), 2018-01-18: Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant). The supported version that is affected is Prior…
- CVE-2018-2617 - CVSS 7.5 (high), 2018-01-18: Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant). The supported version that is affected is Prior…
- CVE-2018-2616 - CVSS 8.8 (high), 2018-01-18: Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant). The supported version that is affected is Prior…
- CVE-2016-7103 - CVSS 6.1 (medium), 2017-03-15: Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText…
- CVE-2015-3197 - CVSS 5.9 (medium), 2016-02-15: ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle…
