OS
Product
Oss Support Tools
On CISA KEVExploited in the wild
17
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 10Low 0
Watch
Add Oss Support Tools to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11023 In wildKEV | 6.1 | Apr 29 | Potential XSS vulnerability in jQuery Affected: before 2.12.41 |
| CVE-2019-5482 | 9.8 | Sep 16 | Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3 Affected: 20.0 |
| CVE-2019-5481 | 9.8 | Sep 16 | Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3 Affected: 20.0 |
| CVE-2018-2616 | 8.8 | Jan 18 | Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant) Affected: before 2.11.33 |
| CVE-2018-2615 | 8.8 | Jan 18 | Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant) Affected: before 2.11.33 |
| CVE-2019-5443 | 7.8 | Jul 2 | A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run the code (as… Affected: 20.0 |
| CVE-2019-5436 | 7.8 | May 28 | A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1 Affected: 20.0 |
| CVE-2018-2617 | 7.5 | Jan 18 | Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant) Affected: before 2.11.33 |
| CVE-2021-41973 | 6.5 | Nov 1 | In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely Affected: 2.12.42 |
| CVE-2021-30129 | 6.5 | Jul 12 | A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error Affected: 2.12.42 |
| CVE-2015-9251 | 6.1 | Jan 18 | jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript… Affected: 19.1 |
| CVE-2016-7103 | 6.1 | Mar 15 | Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog… Affected: before 2.12.42; 2.12.42 |
| CVE-2021-27568 | 5.9 | Feb 23 | An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4 Affected: before 2.12.42 |
| CVE-2015-3197 | 5.9 | Feb 15 | ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat… Affected: 8.11.16.3.8 |
| CVE-2022-21405 | 5.5 | Apr 19 | Vulnerability in the OSS Support Tools product of Oracle Support Tools (component: Oracle Explorer) Affected: 18.3 |
| CVE-2021-2303 | 4.9 | Apr 22 | Vulnerability in the OSS Support Tools product of Oracle Support Tools (component: Diagnostic Assistant) Affected: before 2.12.41 |
| CVE-2021-29425 | 4.8 | Apr 13 | Possible limited path traversal vulnerabily in Apache Commons IO Affected: before 2.12.42 |
Showing 17