Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

35 records

Vendor: Oracle Component: Banking Payments Clear all filters
TI-2021-18513 CVE-2021-41973 · GHSA-6mcm-j9cj-3vc3

Apache MINA HTTP listener DOS

Priority LOW 36

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.04634 Published 2021-11-01 Partial fix · 2.1.5, 2.0.22 CWE-835
TI-2021-14540 CVE-2021-36090 · GHSA-mc84-pj99-q6hh

Apache Commons Compress 1.0 to 1.20 denial of service vulnerability

Priority MEDIUM 53

When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.12945 Published 2021-07-13 Partial fix · 1.21 CWE-130
TI-2021-14251 CVE-2021-35517 · GHSA-xqfj-vm6h-2x34

Apache Commons Compress 1.1 to 1.20 denial of service vulnerability

Priority MEDIUM 52

When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.10614 Published 2021-07-13 Partial fix · 1.21 CWE-130
TI-2021-14249 CVE-2021-35515 · GHSA-7hfm-57qf-j43q

Apache Commons Compress 1.6 to 1.20 denial of service vulnerability

Priority MEDIUM 46

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.11567 Published 2021-07-13 Partial fix · 1.21 CWE-834
TI-2021-10677 CVE-2021-30129 · GHSA-9279-7hph-r3xw

DoS/OOM leak vulnerability in Apache Mina SSHD Server

Priority LOW 34

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03049 Published 2021-07-12 Partial fix · 2.7.0 CWE-772
TI-2019-09246 CVE-2019-12399 · GHSA-6jmf-mxwf-r3jc

Cleartext transmission of sensitive information in Apache Kafka

Priority LOW 39

When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config providers, and a connector is created/updated on that Connect cluster to use an externalized…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03915 Published 2020-01-14 Fixed in 2.0.2, 2.1.2 +2 CWE-319
TI-2019-09260 CVE-2019-12415 · GHSA-9jwc-q6j3-8g9g

XML external entity injection in Apache POI

Priority LOW 27

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from intern…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00998 Published 2019-10-23 Partial fix · 4.1.1 CWE-611
TI-2019-09249 CVE-2019-12402 · GHSA-53x6-4x5p-rrvv

Infinite loop in Apache Commons Compress

Priority MEDIUM 49

The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.16157 Published 2019-08-29 Partial fix · 1.19 CWE-835
Load more