Записи oracle

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-mes

• pre-auth RCE

apache · struts10 мар. 2017 г.

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST da

• pre-auth RCE

phpunit project · phpunit27 июн. 2017 г.

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attac

• pre-auth RCE
• Инъекция команд

gnu · bash24 сент. 2014 г.

Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:,

• pre-auth RCE

apache · archiva19 июл. 2013 г.

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

• Без аутентификации

oracle · weblogic server21 окт. 2020 г.

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

• pre-auth RCE
• Обход пути

apache · http server5 окт. 2021 г.

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

• pre-auth RCE
• Обход пути

apache · http server7 окт. 2021 г.

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).

• Без аутентификации

oracle · agile product lifecycle management26 апр. 2019 г.

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).

• Без аутентификации
• Десериализация

oracle · weblogic server18 апр. 2018 г.

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variabl

• pre-auth RCE
• Инъекция команд

gnu · bash24 сент. 2014 г.

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to

• pre-auth RCE

vmware · spring cloud function1 апр. 2022 г.

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration).

• Без аутентификации
• Обход аутентификации

oracle · concurrent processing5 окт. 2025 г.

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution.

• pre-auth RCE
• Десериализация

jenkins · jenkins29 янв. 2018 г.

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

• pre-auth RCE

vmware · spring framework1 апр. 2022 г.

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat.

• Без аутентификации

apache · geode24 февр. 2020 г.

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

• Без аутентификации

oracle · weblogic server2 нояб. 2020 г.

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier

• Без аутентификации

oracle · jre18 июн. 2013 г.

Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to

• pre-auth RCE
• Нарушение контроля доступа (IDOR)

oracle · jdk27 авг. 2012 г.

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload).

• Без аутентификации
• Обход аутентификации

oracle · e-business suite18 окт. 2022 г.

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuat

• pre-auth RCE

vmware · spring cloud gateway3 мар. 2022 г.

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier,

• Без аутентификации

oracle · jre7 июн. 2012 г.

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation).

• Без аутентификации
• Десериализация

oracle · access manager15 янв. 2020 г.

Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBean

• pre-auth RCE
• Нарушение контроля доступа (IDOR)

oracle · jdk10 янв. 2013 г.

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerabilit

• pre-auth RCE

broadcom · spring data commons11 апр. 2018 г.

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remot

• Без аутентификации
• Нарушение контроля доступа (IDOR)

oracle · jdk19 окт. 2011 г.