CVE-2016-3515

概要

参考情報

• oracle.com/technetwork/security-advisory/cpujul2016-2881720.html · Patch
• securityfocus.com/bid/91787 · Third Party Advisory
• securityfocus.com/bid/91854
• securitytracker.com/id/1036401
• synacktiv.com/ressources/oracle_sbc_logfiles_leak.pdf · Third Party Advisory

enterprise communications broker のその他の脆弱性

• CVE-2021-3712高 7.4ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a fi…
• CVE-2021-3711緊急 9.8In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will…
• CVE-2021-23017高 7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cau…
• CVE-2021-29425中 4.8In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\f…
• CVE-2021-23337高 7.2Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.