Vulnerabilities

Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Third Party).

Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security Component).

Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security).

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

Traefik is an HTTP reverse proxy and load balancer.

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw.

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout.

JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has ac…

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration.

XStream is a simple library to serialize objects to XML and back again.

XStream is a simple library to serialize objects to XML and back again.

XStream is a simple library to serialize objects to XML and back again.

XStream is a simple library to serialize objects to XML and back again.

XStream is a simple library to serialize objects to XML and back again.

XStream is a simple library to serialize objects to XML and back again.

XStream is a simple library to serialize objects to XML and back again.

XStream is a simple library to serialize objects to XML and back again.

XStream is a simple library to serialize objects to XML and back again.

XStream is a simple library to serialize objects to XML and back again.

XStream is a simple library to serialize objects to XML and back again.

XStream is a simple library to serialize objects to XML and back again.

XStream is a simple library to serialize objects to XML and back again.

XStream is a simple library to serialize objects to XML and back again.

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs.