EUVD-1999-0345

Malware in sbrugna...

CVE-1999-0345

Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems...

jolt:JsonUtilsFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Detailed Report: https://oss-fuzz.com/testcase?key=6244378689470464 Project: jolt Fuzzing Engine: libFuzzer Fuzz Target: JsonUtilsFuzzer Job Type: libfuzzerasanjolt Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.Arrays.copyOf...

The vulnerability of the JoltTransform component in the Apache NiFi data processing platform allows attackers to execute cross-site scripting attacks.

The vulnerability of the JoltTransform component in the Apache NiFi data processing platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Apache NiFi 跨站脚本漏洞

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation and system intermediary logic. Apache NiFi suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and...

jolt:JsonUtilsFuzzer: Security exception in com.fasterxml.jackson.databind.deser.std.MapDeserializer.deserialize

Project: https://github.com/bazaarvoice/jolt.git Detailed Report: https://oss-fuzz.com/testcase?key=4661199162441728 Project: jolt Fuzzing Engine: libFuzzer Fuzz Target: JsonUtilsFuzzer Job Type: libfuzzerasanjolt Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Design/Logic Flaw

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. While the...

CVE-2018-3007

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. While the...

PT-2018-15976

Name of the Vulnerable Software and Affected Versions Oracle Tuxedo versions 12.1.1, 12.1.3, 12.2.2 Description The issue allows an unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo, potentially impacting additional products. Successful attacks can result in...

Oracle Tuxedo Jolt Protocol Heap Buffer Overflow (CVE-2017-10278)

A heap buffer overflow vulnerability exists in Oracle's Tuxedo and PeopleSoft products. This vulnerability is due a lack of length field checking in JOLT protocol structure. A successful attack could lead to remote code execution...

Design/Logic Flaw

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Security. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo...

Design/Logic Flaw

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. While...

CVE-2017-10278

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Security. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo...

CVE-2017-10266

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo...

CVE-2017-10269

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. While...

CVE-2017-10272

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via Jolt to compromise Oracle Tuxedo. While...

CVE-2017-10266

CVE-2017-10266 affects Oracle Tuxedo, a component of Oracle Fusion Middleware. The vulnerability allows an unauthenticated attacker with network access via Jolt to compromise Tuxedo, potentially enabling unauthorized read access to Oracle Tuxedo data. Affected supported versions are 11.1.1, 12.1....

CVE-2017-10269

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. While...

PT-2017-11258

Name of the Vulnerable Software and Affected Versions Oracle Tuxedo versions 11.1.1, 12.1.1, 12.1.3, 12.2.2 Description The issue allows an unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo, resulting in unauthorized access to critical data or complete access to al...

PT-2017-11266

Name of the Vulnerable Software and Affected Versions Oracle Tuxedo versions 11.1.1, 12.1.1, 12.1.3, 12.2.2 Description The issue allows an unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. Successful attacks can result in unauthorized access to critical data,...