Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

19 records

Vendor: Oracle Component: Oss Support Tools Clear all filters
TI-2021-18513 CVE-2021-41973 · GHSA-6mcm-j9cj-3vc3

Apache MINA HTTP listener DOS

Priority LOW 36

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.04634 Published 2021-11-01 Partial fix · 2.1.5, 2.0.22 CWE-835
TI-2021-10677 CVE-2021-30129 · GHSA-9279-7hph-r3xw

DoS/OOM leak vulnerability in Apache Mina SSHD Server

Priority LOW 34

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03049 Published 2021-07-12 Partial fix · 2.7.0 CWE-772
TI-2021-10139 CVE-2021-29425 · GHSA-gwrp-pvrq-jmwv

Possible limited path traversal vulnerabily in Apache Commons IO

Priority MEDIUM 48

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.10549 Published 2021-04-13 Partial fix · 2.7 CWE-20
TI-2020-08897 CVE-2020-11023 · GHSA-jpcq-cgw6-v4j6

Potential XSS vulnerability in jQuery

Priority CRITICAL 88KEV

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.84887 Published 2020-04-29 Partial fix · 3.5.0, 4.4.0 CWE-79
TI-2019-07539 CVE-2019-10219 · GHSA-m8p2-495h-ccmh

Cross-site scripting in hibernate-validator

Priority LOW 31

A vulnerability was found in Hibernate-Validator.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02157 Published 2019-11-08 Partial fix · 6.0.18.Final, 6.1.0.Final +1 CWE-79
TI-2019-03851 CVE-2019-5443 · GHSA-79v3-h2vf-vcg6

Code injection in curl

Priority LOW 35

A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run the code (as an openssl "engine") on invocation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0069 Published 2019-07-02 No fix listed CWE-94
TI-2019-03845 CVE-2019-5436 · GHSA-8xvc-p9x4-w7jm

Heap-based buffer overflow in curl

Priority HIGH 67

A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.49739 Published 2019-05-28 Partial fix CWE-122
TI-2015-07630 CVE-2015-9251 · GHSA-rmxg-73gg-4p98

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a…

Priority MEDIUM 51

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.29726 Published 2018-01-18 Partial fix · 1.12.2, 3.0.0 +1 CWE-79