CVE-2015-0500

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html · Third Party Advisory
• oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html · Vendor Advisory
• oracle.com/technetwork/topics/security/cpuapr2015-2365600.html · Vendor Advisory
• securityfocus.com/bid/74081
• securitytracker.com/id/1032121
• security.gentoo.org/glsa/201507-19

communications policy management のその他の脆弱性

• CVE-2022-22965緊急 9.8悪用確認済み（CISA KEV）A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific…
• CVE-2021-43859高 7.5XStream is an open source java library to serialize objects to XML and back again. Versions prior to 1.4.19 may allow a remote attacker to a…
• CVE-2021-23450緊急 9.8All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.
• CVE-2021-43527緊急 9.8NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-…
• CVE-2021-33037中 5.3Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header …