3 matches found
CVE-2021-45105
Summary of CVE-2021-45105 (Log4j2) : Affected Log4j 2.x versions 2.0-alpha1 through 2.16.0 (except 2.12.3 and 2.3.1) are vulnerable to denial of service via uncontrolled recursion triggered by self-referential lookups in Thread Context Map data. The root cause is improper handling of self-referen...
CVE-2020-13956
CVE-2020-13956 affects Apache HttpClient prior to 4.5.13 and 5.0.3. A malformed authority component in request URIs, when passed as a java.net.URI, can cause the client to misinterpret the target host and execute the request against an unintended host. This represents a misrouting vulnerability i...
CVE-2023-21969
CVE-2023-21969 affects Oracle SQL Developer (Installation component) with versions prior to 23.1.0. The root cause is insufficient input validation in the Installation component, allowing a high-privileged user with local access to compromise the Oracle SQL Developer instance, potentially taking ...