CC
Product
Communications Cloud Native Core Binding Support Function
On CISA KEVExploited in the wild
73
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 38Medium 26Low 3
Watch
Add Communications Cloud Native Core Binding Support Function to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-10219 | 6.1 | Nov 8 | A vulnerability was found in Hibernate-Validator Affected: 1.9.0; 1.10.0 |
| CVE-2021-22947 | 5.9 | Sep 29 | When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple… Affected: 1.11.0; 22.1.3 |
| CVE-2021-3426 | 5.7 | May 20 | There's a flaw in Python 3's pydoc Affected: 1.10.0 |
| CVE-2022-0322 | 5.5 | Mar 25 | A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access Affected: 22.1.3 |
| CVE-2022-22946 | 5.5 | Mar 4 | In spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable HTTP2 and no key store or trusted certificates are set will be configured to use an… Affected: 22.1.3 |
| CVE-2021-3744 | 5.5 | Mar 4 | A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory… Affected: 22.1.3 |
| CVE-2022-0286 | 5.5 | Jan 31 | A flaw was found in the Linux kernel Affected: 22.1.3 |
| CVE-2021-43389 | 5.5 | Nov 4 | An issue was discovered in the Linux kernel before 5.14.15 Affected: 22.1.3 |
| CVE-2021-36374 | 5.5 | Jul 14 | When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even… Affected: 1.11.0 |
| CVE-2021-36373 | 5.5 | Jul 14 | When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small… Affected: 1.11.0 |
| CVE-2020-0404 | 5.5 | Sep 17 | In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause Affected: 22.1.3 |
| CVE-2023-21971 | 5.3 | Apr 18 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J) Affected: 22.4.0; 23.1.0 |
| CVE-2022-24329 | 5.3 | Feb 25 | In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects Affected: 22.1.3 |
| CVE-2021-34429 | 5.3 | Jul 15 | For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or… Affected: 1.10.0 |
| CVE-2021-22897 | 5.3 | Jun 11 | curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the… Affected: 1.11.0 |
| CVE-2020-27820 | 4.7 | Nov 3 | A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could happen if removing device (that is not common to remove video card… Affected: 22.1.3 |
| CVE-2020-4788 | 4.7 | Nov 20 | IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances Affected: 22.1.3 |
| CVE-2021-43976 | 4.6 | Nov 17 | In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (who can connect a crafted USB device) to cause a denial of… Affected: 22.1.3 |
| CVE-2023-21824 | 4.4 | Jan 18 | Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications Applications (component: Customer, Config, Pricing Manager) Affected: 22.3.0 |
| CVE-2021-4002 | 4.4 | Mar 3 | A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligned to PUD alignment… Affected: 22.1.3 |
| CVE-2021-45486 | 3.5 | Dec 25 | In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small Affected: 22.1.3 |
| CVE-2021-21781 | 3.3 | Aug 18 | An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54 Affected: 22.1.3 |
| CVE-2021-22898 | 3.1 | Jun 11 | curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content… Affected: 1.11.0 |