TI-2026-34549 CVE-2026-46943 · GHSA-6ghx-3jm3-5jj3
Improper access control in Oracle Retail EFTLink
Priority LOW 34
Vulnerability in the Oracle Retail EFTLink product of Oracle Retail Applications (component: Core/Plugin).
Vulnerabilities
11 records
TI-2021-20437 CVE-2021-45105 · GHSA-p6xc-xr62-6r2g
Apache Log4j2 does not always protect from infinite recursion in lookup evaluation
Priority HIGH 72
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.
TI-2021-18769 CVE-2021-42340 · GHSA-wph7-x527-w3h5
DoS via memory leak with WebSocket connections
Priority MEDIUM 46
The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak.
TI-2021-13463 CVE-2021-34429 · GHSA-vjv5-gp2w-65vm
Information disclosure in Eclipse Jetty
Priority HIGH 69
For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints.
TI-2021-14728 CVE-2021-36374 · GHSA-5v34-g2px-j4fw
Apache Ant ZIP, and ZIP based, archive denial of service vulerability
Priority LOW 30
When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs.
TI-2021-14727 CVE-2021-36373 · GHSA-q5r4-cfpx-h6fh
Apache Ant TAR archive denial of service vulnerability
Priority LOW 30
When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs.
TI-2020-16544 CVE-2020-27218 · GHSA-86wm-rrjm-8wh8
In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2…
Priority LOW 33
In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto…
TI-2020-09639 CVE-2020-11979 · GHSA-f62v-xpxf-3v68
Injection in Apache Ant
Priority MEDIUM 49
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them.
TI-2020-07597 CVE-2020-9488 · GHSA-vwqq-5vrc-xw9h
Improper certificate validation in Apache Log4j
Priority LOW 29
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender.
TI-2019-07539 CVE-2019-10219 · GHSA-m8p2-495h-ccmh
Cross-site scripting in hibernate-validator
Priority LOW 31
A vulnerability was found in Hibernate-Validator.
TI-2017-09342 CVE-2017-12617 · GHSA-xjgh-84hx-56c5
Unrestricted file upload in Apache Tomcat
Priority CRITICAL 94KEV
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g.