Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
OracleSecure Backup

30 matches found

CVE
CVE•added 2021/06/10 7:15 a.m.•7244 views

CVE-2021-26691

In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow

9.8CVSS9.2AI score0.37858EPSS
CVE
CVE•added 2021/10/07 4:15 p.m.•2038 views

CVE-2021-42013

It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default co...

9.8CVSS9.4AI score0.94428EPSS
CVE
CVE•added 2021/08/16 8:15 a.m.•1619 views

CVE-2021-33193

A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48.

7.5CVSS7.8AI score0.01003EPSS
CVE
CVE•added 2021/03/25 3:15 p.m.•749 views

CVE-2021-3449

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a...

5.9CVSS6.7AI score0.15517EPSS
CVE
CVE•added 2021/08/24 3:15 p.m.•607 views

CVE-2021-3712

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byt...

7.4CVSS8AI score0.00814EPSS
CVE
CVE•added 2021/03/25 3:15 p.m.•517 views

CVE-2021-3450

The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an...

7.4CVSS7.6AI score0.00504EPSS
CVE
CVE•added 2019/11/08 3:15 p.m.•230 views

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

6.5CVSS6AI score0.01915EPSS
CVE
CVE•added 2015/03/30 10:59 a.m.•177 views

CVE-2015-1351

Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

7.5CVSS7.7AI score0.11084EPSS
CVE
CVE•added 2009/07/14 11:30 p.m.•64 views

CVE-2009-1978

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle has not commented on...

9CVSS6.3AI score0.85719EPSS
CVE
CVE•added 2009/07/14 11:30 p.m.•57 views

CVE-2009-1977

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle has not commented on...

10CVSS5.7AI score0.85139EPSS
CVE
CVE•added 2010/01/13 1:30 a.m.•54 views

CVE-2010-0072

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2010 CPU. Oracle has not commented on cla...

10CVSS7.2AI score0.10259EPSS
CVE
CVE•added 2009/01/14 2:30 a.m.•51 views

CVE-2008-5443

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5441 and CVE-2008-5442.

5CVSS6AI score0.01689EPSS
CVE
CVE•added 2009/01/14 1:30 a.m.•51 views

CVE-2008-5448

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5449.

10CVSS5.8AI score0.84009EPSS
CVE
CVE•added 2010/07/13 10:30 p.m.•51 views

CVE-2010-0907

Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0898, CVE-2010-0899, CVE-2010-0904, and CVE-2010-0906.

10CVSS5.9AI score0.88044EPSS
CVE
CVE•added 2009/01/14 1:30 a.m.•50 views

CVE-2008-5442

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5441 and CVE-2008-5443.

5CVSS6AI score0.01689EPSS
CVE
CVE•added 2010/07/13 10:30 p.m.•50 views

CVE-2010-0898

Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

10CVSS5.9AI score0.02517EPSS
CVE
CVE•added 2010/07/13 10:30 p.m.•50 views

CVE-2010-0904

Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect integrity via unknown vectors.

5CVSS5.9AI score0.88044EPSS
CVE
CVE•added 2010/07/13 10:30 p.m.•49 views

CVE-2010-0899

Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0898, CVE-2010-0907, and CVE-2010-0906.

9CVSS5.5AI score0.04782EPSS
CVE
CVE•added 2010/07/13 10:30 p.m.•48 views

CVE-2010-0906

Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

9CVSS5.5AI score0.00575EPSS
CVE
CVE•added 2009/01/14 1:30 a.m.•47 views

CVE-2008-5444

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5448 and CVE-2008-5449.

10CVSS5.9AI score0.84009EPSS
CVE
CVE•added 2009/01/14 2:30 a.m.•45 views

CVE-2008-5445

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that thi...

5CVSS6AI score0.01658EPSS
CVE
CVE•added 2009/01/14 1:30 a.m.•44 views

CVE-2008-5449

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5448.

10CVSS5.9AI score0.84009EPSS
CVE
CVE•added 2009/01/14 1:30 a.m.•43 views

CVE-2008-4006

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

10CVSS5.8AI score0.02329EPSS
CVE
CVE•added 2009/01/14 1:30 a.m.•43 views

CVE-2008-5441

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5442 and CVE-2008-5443.

5CVSS6AI score0.01689EPSS
CVE
CVE•added 2011/07/20 11:55 p.m.•41 views

CVE-2011-2252

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.3.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2011-2261.

6.8CVSS6AI score0.03493EPSS
CVE
CVE•added 2025/04/15 9:15 p.m.•39 views

CVE-2025-21578

Vulnerability in Oracle Secure Backup (component: General). Supported versions that are affected are 12.1.0.1, 12.1.0.2, 12.1.0.3, 18.1.0.0, 18.1.0.1 and 18.1.0.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Secure Backup executes t...

6.7CVSS6AI score0.00026EPSS
CVE
CVE•added 2011/07/20 11:55 p.m.•37 views

CVE-2011-2251

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.3.0.3 allows remote attackers to affect integrity via unknown vectors.

4.3CVSS6AI score0.0042EPSS
CVE
CVE•added 2011/01/19 4:0 p.m.•32 views

CVE-2010-3596

Unspecified vulnerability in the mod_ssl component in Oracle Secure Backup 10.3.0.2 allows remote attackers to affect integrity and availability via unknown vectors.

6.4CVSS6.2AI score0.00719EPSS
CVE
CVE•added 2009/01/14 1:30 a.m.•31 views

CVE-2008-3981

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.1 allows remote attackers to affect confidentiality via unknown vectors.

5CVSS6AI score0.00442EPSS
CVE
CVE•added 2011/07/20 11:55 p.m.•31 views

CVE-2011-2261

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.3.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2011-2252.

10CVSS6AI score0.03493EPSS