CVE-2016-3516

Description

References

• oracle.com/technetwork/security-advisory/cpujul2016-2881720.html · Patch
• securityfocus.com/bid/91787 · Third Party Advisory
• securityfocus.com/bid/91858
• securitytracker.com/id/1036401
• synacktiv.com/ressources/oracle_sbc_verb_tampering.pdf · Third Party Advisory

Altre vulnerabilità di enterprise communications broker

• CVE-2021-3712ALTO 7.4ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a fi…
• CVE-2021-3711CRITICO 9.8In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will…
• CVE-2021-23017ALTO 7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cau…
• CVE-2021-29425MEDIO 4.8In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\f…
• CVE-2021-23337ALTO 7.2Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.