CVE-2015-0409

概要

参考情報

• oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html · Vendor Advisory
• oracle.com/technetwork/topics/security/cpujan2015-1972971.html · Patch
• securityfocus.com/bid/72223
• securitytracker.com/id/1031581 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/100188
• security.gentoo.org/glsa/201504-05

communications policy management のその他の脆弱性

• CVE-2022-22965緊急 9.8悪用確認済み（CISA KEV）A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific…
• CVE-2021-43859高 7.5XStream is an open source java library to serialize objects to XML and back again. Versions prior to 1.4.19 may allow a remote attacker to a…
• CVE-2021-23450緊急 9.8All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.
• CVE-2021-43527緊急 9.8NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-…
• CVE-2021-33037中 5.3Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header …