CVE-2021-34558

CVE-2021-34558 affects the Go crypto/tls implementation. In Go up to 1.16.5, the certificate public-key type is not properly validated for RSA-based key exchanges, allowing a TLS server to trigger a panic in the client. Several connected advisories link this to Go’s TLS handling and note remediat...

CVE-2017-5645

CVE-2017-5645 affects Apache Log4j 2.x prior to 2.8.2. The vulnerability arises when using a TCP/UDP socket server to receive serialized log events from another application; a crafted binary payload can be deserialized to execute arbitrary code. The documented impact is remote code execution via ...

CVE-2021-36374

CVE-2021-36374 affects Apache Ant and causes denial of service via memory allocation when parsing specially crafted ZIP-based archives (and derived formats such as JARs and certain Office files). The vulnerability stems from how Ant reads these archives, enabling large memory use and out-of-memor...

CVE-2021-36221

CVE-2021-36221 is a race-condition in Go’s net/http/httputil ReverseProxy that can panic when an ErrAbortHandler abort occurs, as documented in multiple advisories. Affected component: Go standard library HTTP/ReverseProxy handling. Impact: potential denial of service via engine panic; availabili...

CVE-2020-1945

This CVE (CVE-2020-1945) affects Apache Ant. Connected Arch Linux advisory ASA-202005-15 confirms the vulnerability exists in ant before version 1.10.8-1, where Ant uses java.io.tmpdir for several tasks and can leak sensitive information. The fixcrlf and replaceregexp tasks may copy files from th...

CVE-2021-29923

CVE-2021-29923 describes a weakness in Go’s IP address parsing (net.ParseIP/net.ParseCIDR) where extraneous leading zeros in an octet can cause unintended octal interpretation, bypassing IP-based access controls. The issue affects Go versions before 1.17. Several connected advisories note patches...

CVE-2021-41772

CVE-2021-41772 affects Go's standard library archive/zip Reader.Open. A crafted ZIP with invalid/empty filename can cause a panic in Go code parsing the archive. The initial description notes affected Go versions: Go before 1.16.10 and 1.17.x before 1.17.3. Connected advisories corroborate the is...

CVE-2019-10219

The CVE-2019-10219 entry affects Hibernate Validator: SafeHtml validator annotation fails to sanitize HTML comments/instructions, enabling XSS in affected code paths. Affected CP4S versions are 1.7.2.0, 1.8.0.0, and 1.8.1.0. Remediation is to upgrade to Cloud Pak for Security 1.9.0.0 per IBM guid...

CVE-2020-11979

CVE-2020-11979 affects Apache Ant 1.10.8. The mitigation for CVE-2020-1945 changed temp-file permissions, but the fixcrlf task deleted the temp file and recreated it without protection, enabling an attacker to inject modified source files during builds. Connected advisories confirm the issue and ...

CVE-2016-8610

CVE-2016-8610 is a denial-of-service flaw in OpenSSL affecting TLS/SSL alert packet processing during handshakes. The issue exists in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0, enabling a remote attacker to cause high CPU usage and denial of service by sending many alert messages. Con...

CVE-2021-36373

CVE-2021-36373 is a denial-of-service in Apache Ant caused by reading a specially crafted TAR archive that can exhaust memory, leading to OOM during builds. The initial description notes that Ant versions affected include 1.9.16 and 1.10.11 and that a memory exhaustion can disrupt builds. Connect...

CVE-2021-2351

CVE-2021-2351 affects Oracle Database Server’s Advanced Networking Option, with affected versions 12.1.0.2, 12.2.0.1, and 19c. The vulnerability allows unauthenticated network access via Oracle Net to compromise the Advanced Networking Option, with access requiring user interaction (UI_R) and ris...

CVE-2019-0201

CVE-2019-0201 affects Apache ZooKeeper up to versions 3.4.13 and 3.5.4-beta, where getACL() does not enforce permissions and returns the ACL Id in plaintext. When Digest Authentication is in use, the unsalted hash value contained in the Id field can be disclosed to unauthenticated or unprivileged...

CVE-2019-1010239

CVE-2019-1010239 affects the cJSON project (cJSON 1.7.8) with an Improper Check for Unusual or Exceptional Conditions in the cJSON_GetObjectItemCaseSensitive() function. The vulnerability allows a crafted JSON file to trigger a NULL dereference, leading to denial of service. The fixed version is ...

CVE-2016-2381

CVE-2016-2381 describes a Perl taint protection bypass in child processes caused by duplicate environment variables in envp. This context-dependent issue could allow an attacker to bypass taint checks, potentially enabling unintended behavior or exposure in vulnerable Perl workflows. Public refer...

CVE-2020-7712

CVE-2020-7712—Initial public details: the vulnerability in json package prior to 10.0.0 enables arbitrary command injection via parseLookup. Connected data from a Nessus plugin (Oracle Siebel Server <= 22.5) cites the CVE and describes a vulnerability in Siebel CRM (component: Loging/APache Zo...

CVE-2018-1288

CVE-2018-1288 affects Apache Kafka across multiple 0.9.x–1.0.0 release lines; authenticated users can issue a fetch request that performs a broker-reserved action, potentially causing data loss during replication. Public documentation here documents the issue and confirms fixes in later Kafka bui...

CVE-2018-11058

CVE-2018-11058 affects RSA BSAFE Micro Edition Suite (4.0.x before 4.0.11; 4.1.x before 4.1.6) and RSA BSAFE Crypto-C Micro Edition (4.0.x before 4.0.5.3). The issue is a buffer over-read when parsing ASN.1 data, exploitable by remotely crafted ASN.1 input. Connected Nessus entries (e.g., Oracle ...

CVE-2019-11834

CVE-2019-11834 affects cJSON before 1.7.11, allowing out-of-bounds access related to a null byte in a string literal. Public documents corroborate the issue across multiple feeds; one entry ties it to libglvnd

CVE-2019-11835

CVE-2019-11835 affects the cJSON library prior to 1.7.11, where parsing issues with multiline comments enable out-of-bounds access. Impact per sources: high severity (CVSS 3.1 base 9.8; NETWORK, LOW complexity, NONE privileges). Affected: cJSON before 1.7.11. Remediation: upgrade to 1.7.11 or lat...

CVE-2018-11055

RSA BSAFE Micro Edition Suite (MES) contains an Improper Clearing of Heap Memory Before Release vulnerability in MES versions 4.0.x before 4.0.11 and 4.1.x before 4.1.6.1. Decoded PKCS#12 data in heap memory is not zeroized before memory release, enabling a local attacker to access previously dec...

CVE-2018-15769

CVE-2018-15769 affects RSA BSAFE Micro Edition Suite: versions before 4.0.11 (4.0.x) and before 4.1.6.2 (4.1.x). The issue is a key management flaw that can allow a TLS server using Ephemeral/Anonymous Diffie-Hellman (DHE/ADH) ciphers to cause a Denial-of-Service on TLS clients during the handsha...

CVE-2018-11056

The CVE describes a DoS risk in Dell EMC RSA BSAFE Micro Edition Suite (MES) before 4.1.6.1 (4.1.x line) and RSA BSAFE Crypto-C Micro Edition before 4.0.5.3 (4.0.x line). The vulnerability is an Uncontrolled Resource Consumption (Resource Exhaustion) when parsing ASN.1 data, allowing a remote att...

CVE-2008-5440

Summary: CVE-2008-5440 concerns Oracle TimesTen In-Memory Database, specifically the TimesTen Data Server component. Connected sources clearly describe a format string vulnerability in the evtdump CGI module, triggered by the HTTP/message handling (parameter ‘msg’), which can be exploited remotel...

CVE-2018-11054

CVE-2018-11054 affects RSA BSAFE Micro Edition Suite (MES) 4.1.6. An integer overflow vulnerability exists in the MES ASN.1 processing, allowing a remote attacker to trigger a Denial of Service by sending maliciously constructed ASN.1 data. The provided documents confirm the vulnerability details...

CVE-2010-0910

CVE-2010-0910 affects Oracle TimesTen In-Memory Database Data Server in versions 7.0.6.0 and 11.2.1.4.1. Description and connected materials indicate an unspecified vulnerability in the Data Server component that can be exploited remotely to impact availability via unknown vectors. The vulnerabil...

CVE-2018-11057

CVE-2018-11057 affects Dell EMC RSA BSAFE Micro Edition Suite (MES) versions before 4.0.11 (in 4.0.x) and before 4.1.6.1 (in 4.1.x). The vulnerability is a covert timing channel during RSA decryption, i.e., Bleichenbacher-style timing leakage, enabling a remote attacker to recover an RSA key. The...

CVE-2010-0873

CVE-2010-0873 affects Oracle TimesTen In-Memory Database Data Server (TimesTen Data Server) 7.0.6.0. The vulnerability is remotely exploitable over TCP/IP (network), with no authentication, and has a CVSS v2 base score of 10.0 (Confidentiality, Integrity, and Availability all Complete). The issue...

CVE-2026-60405

CVE-2026-60405 affects Oracle TimesTen In-Memory Database (Kubernetes Operator component) with affected version 26.1.1.1.0. The description states a low-privilege, locally authenticated attacker can compromise TimesTen In-Memory Database, potentially allowing unauthorized read access to a subset ...

CVE-2026-60411

CVE-2026-60411 affects Oracle TimesTen In-Memory Database, component ttcserver, with affected version 26.1.1.1.0. The vulnerability allows an unauthenticated attacker with access to the physical communication segment to compromise TimesTen, potentially causing a hang or frequent crashes (complete...

CVE-2026-60406

CVE-2026-60406 affects Oracle TimesTen In-Memory Database (Kubernetes Operator component) with vulnerable version 26.1.1.1.0. The vulnerability allows a high-privilege attacker who can log on to the infrastructure running TimesTen In-Memory Database to compromise the database, potentially taking ...

CVE-2026-60401

CVE-2026-60401 affects Oracle TimesTen In-Memory Database (TimesTen), specifically the Kubernetes Operator component. The vulnerable version is 26.1.1.1.0. The advisory states that a low-privilege user with logon to the infrastructure where TimesTen runs can compromise TimesTen In-Memory Database...

CVE-2026-60403

CVE-2026-60403 affects Oracle TimesTen In-Memory Database (Kubernetes Operator component) with vulnerable version 26.1.1.1.0. An attacker with network access over HTTPS and low privileges can cause the database to hang or crash (DoS). CVSS 3.1 base score 6.5 (A:H; AV:N; AC:L; PR:L). No explicit e...

CVE-2026-60404

This CVE affects Oracle TimesTen In-Memory Database (Kubernetes Operator) with the vulnerable component/version: TimesTen In-Memory Database 26.1.1.1.0. The vulnerability enables a low-privileged, network-accessible attacker (HTTPS) to cause a hang or frequently crash the TimesTen In-Memory Datab...

CVE-2026-60410

CVE-2026-60410 : In Oracle TimesTen In-Memory Database, the Kubernetes Operator component is affected (version 26.1.1.1.0). The issue enables a low-privilege attacker who can reach the service over HTTPS to cause a partial denial of service to TimesTen In-Memory Database. The CVSS 3.1 base score ...

CVE-2026-60408

CVE-2026-60408 affects Oracle TimesTen In-Memory Database (Kubernetes Operator) with version 26.1.1.1.0. The vulnerability allows a low-privileged attacker with network access over HTTPS to read a subset of TimesTen data. The CVSS v3.1 base score is 4.3 ( Confidentiality impact: Low; Privileges R...

CVE-2026-60409

Technical details for CVE-2026-60409 are not publicly available in the provided documents. Monitor Oracle security advisories and NVD for updates and confirmed impact.

CVE-2026-60402

The CVE-2026-60402 entry concerns Oracle TimesTen In-Memory Database (Kubernetes Operator component) with affected version 26.1.1.1.0. The description states an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTPS to compromise TimesTen In-Memory Da...

CVE-2026-60407

The CVE-2026-60407 affects Oracle TimesTen In-Memory Database (Kubernetes Operator) with an affected build 26.1.1.1.0. The flaw is described as exploitable by a low-privilege user who can log on to the infrastructure where TimesTen runs, potentially leading to compromised TimesTen data and potent...