CO
Product
Communications Operations Monitor
On CISA KEVExploited in the wild
44
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 19Medium 18Low 0
Watch
Add Communications Operations Monitor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11023 In wildKEV | 6.1 | Apr 29 | Potential XSS vulnerability in jQuery Affected: 4.1 through 4.3; 3.4 |
| CVE-2021-44790 | 9.8 | Dec 20 | A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts) Affected: 4.3; 4.4; 5.0 |
| CVE-2019-5482 | 9.8 | Sep 16 | Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3 Affected: 3.4; 4.0; 4.1; 4.2; 4.3 |
| CVE-2019-5481 | 9.8 | Sep 16 | Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3 Affected: 3.4; 4.0; 4.1; 4.2; 4.3 |
| CVE-2019-7164 | 9.8 | Feb 20 | SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter Affected: 4.2; 4.3 |
| CVE-2019-3822 | 9.8 | Feb 6 | libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow Affected: 3.4; 4.0 |
| CVE-2018-11219 | 9.8 | Jun 17 | An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of… Affected: 3.4; 4.0 |
| CVE-2018-11218 | 9.8 | Jun 17 | Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer… Affected: 3.4; 4.0 |
| CVE-2021-32762 | 8.8 | Oct 4 | Redis is an open source, in-memory database that persists on disk Affected: 4.3; 4.4; 5.0 |
| CVE-2021-32626 | 8.8 | Oct 4 | Redis is an open source, in-memory database that persists on disk Affected: 4.3; 4.4; 5.0 |
| CVE-2021-44224 | 8.2 | Dec 20 | A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy… Affected: 4.0; 4.3; 4.4; 5.0 |
| CVE-2022-24735 | 7.8 | Apr 27 | Redis is an in-memory database that persists on disk Affected: 4.3; 4.4; 5.0 |
| CVE-2019-7548 | 7.8 | Feb 6 | SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled Affected: 4.2; 4.3 |
| CVE-2021-23017 | 7.7 | Jun 1 | A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting… Affected: 3.4; 4.2; 4.3; 4.4 |
| CVE-2020-14147 | 7.7 | Jun 15 | An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a… Affected: 3.4; 4.1; 4.2; 4.3 |
| CVE-2021-41099 | 7.5 | Oct 4 | Redis is an open source, in-memory database that persists on disk Affected: 4.3; 4.4; 5.0 |
| CVE-2021-32687 | 7.5 | Oct 4 | Redis is an open source, in-memory database that persists on disk Affected: 4.3; 4.4; 5.0 |
| CVE-2021-32675 | 7.5 | Oct 4 | Redis is an open source, in-memory database that persists on disk Affected: 4.3; 4.4; 5.0 |
| CVE-2021-32628 | 7.5 | Oct 4 | Redis is an open source, in-memory database that persists on disk Affected: 4.3; 4.4; 5.0 |
| CVE-2021-32627 | 7.5 | Oct 4 | Redis is an open source, in-memory database that persists on disk Affected: 4.3; 4.4; 5.0 |
| CVE-2019-16056 | 7.5 | Sep 6 | An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4 Affected: 4.1 through 4.3; 3.4 |
| CVE-2018-16890 | 7.5 | Feb 6 | libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read Affected: 3.4; 4.0 |
| CVE-2019-3823 | 7.5 | Feb 6 | libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP Affected: 3.4; 4.0 |
| CVE-2017-3730 | 7.5 | May 4 | In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL… Affected: 3.4; 4.0 |
| CVE-2022-21395 | 7.2 | Jan 19 | Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine) Affected: 3.4; 4.2; 4.3; 4.4; 5.0 |
| CVE-2019-10193 | 7.2 | Jul 11 | A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4 Affected: 3.4; 4.1 |
| CVE-2019-10192 | 7.2 | Jul 11 | A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4 Affected: 3.4; 4.1 |
| CVE-2022-21403 | 6.6 | Jan 19 | Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine) Affected: 3.4; 4.2; 4.3; 4.4; 5.0 |
| CVE-2022-21401 | 6.6 | Jan 19 | Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine) Affected: 3.4; 4.2; 4.3; 4.4; 5.0 |
| CVE-2022-21399 | 6.6 | Jan 19 | Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine) Affected: 3.4; 4.2; 4.3; 4.4; 5.0 |
| CVE-2016-3513 | 6.5 | Jul 21 | Unspecified vulnerability in the Oracle Communications Operations Monitor component in Oracle Communications Applications before 3.3.92.0.0 allows remote authenticated users to… Affected: through 3.3.92.0.0 |
| CVE-2021-41184 | 6.1 | Oct 26 | jQuery-UI is the official jQuery user interface library Affected: 4.3; 4.4; 5.0 |
| CVE-2021-41183 | 6.1 | Oct 26 | jQuery-UI is the official jQuery user interface library Affected: 4.3; 4.4; 5.0 |
| CVE-2021-41182 | 6.1 | Oct 26 | jQuery-UI is the official jQuery user interface library Affected: 4.3; 4.4; 5.0; 4.3; 4.4; 5.0 |
| CVE-2019-11358 | 6.1 | Apr 20 | jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution Affected: 4.1 through 4.3; 3.4; 4.0; 4.1.0 |
| CVE-2022-24736 | 5.5 | Apr 27 | Redis is an in-memory database that persists on disk Affected: 4.3; 4.4; 5.0 |
| CVE-2022-21400 | 5.4 | Jan 19 | Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine) Affected: 3.4; 4.2; 4.3; 4.4; 5.0 |
| CVE-2022-21398 | 5.4 | Jan 19 | Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine) Affected: 3.4; 4.2; 4.3; 4.4; 5.0 |
| CVE-2022-21397 | 5.4 | Jan 19 | Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine) Affected: 3.4; 4.2; 4.3; 4.4; 5.0 |
| CVE-2022-21396 | 5.4 | Jan 19 | Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine) Affected: 3.4; 4.2; 4.3; 4.4; 5.0 |
| CVE-2022-21246 | 5.4 | Jan 19 | Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine) Affected: 3.4; 4.2; 4.3; 4.4; 5.0 |
| CVE-2019-15165 | 5.3 | Oct 3 | sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory Affected: 3.4; 4.0; 4.1; 4.2; 4.3 |
| CVE-2022-21402 | 4.8 | Jan 19 | Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine) Affected: 3.4; 4.2; 4.3; 4.4; 5.0 |
| CVE-2021-32672 | 4.3 | Oct 4 | Redis is an open source, in-memory database that persists on disk Affected: 4.3; 4.4; 5.0 |
Showing 44
