Due to JMX/RMI services in TIBCO JasperReports Server version 8.0.2 Community Edition performing unsafe deserialization, it is possible to execute arbitrary code and system commands on the server system.
cf89a5a1afe1398d346a6c138d693ce3eb1e1c2bf02ce2079b699b2424581b9cNNE's integrity protection mechanism deliberately weakens the key used for computing per-packet message authentication codes (MACs). Oracle Database versions 19c, 12.2.0.1, and 12.1.0.2 are affected.
819ba67d5e27ccd91c65c8f0781b76862e43a929fdc227c9dab9c9d20d7aa8d2Due to insecure fallback behavior, a man-in-the-middle attacker can bypass NNE's protection against man-in-the-middle attacks and hijack authenticated connections. In some configurations, a full man-in-the-middle attack is possible. Oracle Database versions 19c, 12.2.0.1, and 12.1.0.2 are affected.
d0de07f4f0e48542261c0ae9b420a3424f2d3aa4191dbb91e07c6c991ab3de7bProtection Licensing Toolkit ReadyAPI version 3.2.5 suffers from an unsafe deserialization vulnerability that allows for remote code execution.
0a738ab46dd18ea4fe3151340310163ee7d1af2f6352f68d94c163c9e82580b4SquirrelMail version 1.4.22 suffers from a cross site scripting vulnerability.
e0fade0e7c5216f5956fdcd3b89294dead81e66b576a08326b496cc18d4bc0f4Coldfusion versions 2016 and 2018 along with all current versions of JNBridge suffer from a remote code execution vulnerability.
f87b353777ae773d0c72b225ac02ae458075bc752b4b21bb6aaa070c2db3e58dThis paper presents the "LDAP Swiss Army Knife", an easy to use LDAP server implementation built for penetration oder software testing. Apart from general usage as a server or proxy it also shows some specific attacks against Java/JNDI based LDAP clients.
341da515f73e2922c4e4729bef9645201fe4a74fdb8cb1bf8b386787d5631e80Dojo Toolkit version 1.13 suffers from a cross site scripting vulnerability.
f84edcee9a5e3daa0ab8b77ca5133492843ef287eff253e7a7157bf5d674faa8ILIAS versions 5.3.2, 5.2.14, and 5.1.25 suffer from a cross site scripting vulnerability.
2aac0222aebf2e7413630a3b07065dedd067ddc45d6a86a9fc12a1676428cf5dThis advisory discloses a critical severity security vulnerability which was introduced in version 2.3.1 of Bamboo. Versions of Bamboo starting with 2.3.1 before 5.11.4.1 (the fixed version for 5.11.x) and from 5.12.0 before 5.12.3.1 (the fixed version for 5.12.x) are affected by this vulnerability.
dbfb17c0ede40ea6f49b801493783efdda5b7f9fcc1178a440c9e193c5f682f4
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed