Vulnerabilities

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: Web UI).

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: Log).

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI).

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI).

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length.

In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt().

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other…

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files…

The X.509 GeneralName type is a generic type for representing different types of names.

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications Applications (component: File Upload).

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

A vulnerability was found in Hibernate-Validator.

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution.