Oracle Communications Network Charging And Control vulnerabilities, page 2
39 vulnerabilities
Known vulnerabilities in Oracle Communications Network Charging And Control, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-36187chainguardeco-java-gradle-2.10+115
EPSS score4.24%
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource.CVE-2020-36181chainguardeco-java-gradle-2.10+114EPSS score4.09%
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.CVE-2020-36185chainguardeco-java-gradle-2.10+115EPSS score4.24%
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.CVE-2020-36184chainguardeco-java-gradle-2.10+115EPSS score8.36%
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.CVE-2020-36183chainguardeco-java-gradle-2.10+115EPSS score4.97%
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.CVE-2020-36182chainguardeco-java-gradle-2.10+115EPSS score4.09%
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.CVE-2020-36179chainguardeco-java-gradle-2.10+113EPSS score17.07%
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.CVE-2020-36189chainguardeco-java-gradle-2.10+110EPSS score3.99%
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.CVE-2020-36186chainguardeco-java-gradle-2.10+115EPSS score4.24%
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.CVE-2020-36188chainguardeco-java-gradle-2.10+115EPSS score8.79%
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.CVE-2020-25649apacheiotdb+139EPSS score17.71%
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.CVE-2020-10969chainguardeco-java-gradle-4.10+61EPSS score3.56%
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.CVE-2020-10672chainguardeco-java-gradle-4.10+61EPSS score3.06%
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).CVE-2020-10968chainguardeco-java-gradle-4.10+61EPSS score3.66%
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).CVE-2020-10673chainguardeco-java-gradle-2.10+101EPSS score8.03%
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).CVE-2020-15358alpinesqlite+24EPSS score1.02%
In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.CVE-2020-35728chainguardeco-java-gradle-2.10+110EPSS score12.50%
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).CVE-2019-20330chainguardeco-java-gradle-2.10+100EPSS score8.64%
FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.CVE-2019-10219debianlibhibernate-validator-java+191EPSS score2.16%
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.