CD
Product
Communications Diameter Signaling Router
On CISA KEVExploited in the wild
78
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 20High 36Medium 22Low 0
Watch
Add Communications Diameter Signaling Router to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-2555 In wildKEV | 9.8 | Jan 15 | Oracle Multiple Products Remote Code Execution Vulnerability Affected: 8.0.0 through 8.2.2 |
| CVE-2017-9841 In wildKEV | 9.8 | Jun 27 | Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring,… Affected: 8.0.0 through 8.5.0 |
| CVE-2021-21783 | 9.8 | Mar 25 | A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107 Affected: 8.0.0 through 8.5.0 |
| CVE-2020-11998 | 9.8 | Sep 10 | A regression has been introduced in the commit preventing JMX re-bind Affected: 8.0.0 through 8.5.0 |
| CVE-2020-11973 | 9.8 | May 14 | Apache Camel Netty enables Java deserialization by default Affected: 8.0.0 through 8.5.0 |
| CVE-2020-11972 | 9.8 | May 14 | Apache Camel RabbitMQ enables Java deserialization by default Affected: 8.0.0 through 8.2.2 |
| CVE-2020-10683 | 9.8 | May 1 | dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks Affected: 8.0.0 through 8.2.2 |
| CVE-2020-9546 | 9.8 | Mar 2 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to… Affected: 8.0.0 through 8.2.2 |
| CVE-2020-9548 | 9.8 | Mar 2 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka… Affected: 8.0.0 through 8.2.2 |
| CVE-2019-2904 | 9.8 | Oct 16 | Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces) Affected: 8.0.0.0 through 8.4.0.5 |
| CVE-2019-14379 | 9.8 | Jul 29 | SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of… Affected: 8.0.0; 8.1; 8.2; 8.2.1 |
| CVE-2019-10173 | 9.8 | Jul 23 | It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw Affected: 8.0.0 through 8.2.2 |
| CVE-2019-2729 | 9.8 | Jun 19 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services) Affected: 8.0; 8.1; 8.2; 8.2.1 |
| CVE-2018-1000613 | 9.8 | Jul 9 | Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select… Affected: 8.0.0; 8.1; 8.2; 8.2.1 |
| CVE-2018-8013 | 9.8 | May 24 | In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the… Affected: before 8.3 |
| CVE-2018-1275 | 9.8 | Apr 11 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a… Affected: before 8.3 |
| CVE-2018-1270 | 9.8 | Apr 6 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a… Affected: before 8.3 |
| CVE-2017-15095 | 9.8 | Feb 6 | A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending… Affected: before 8.3 |
| CVE-2020-7060 | 9.1 | Feb 10 | When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data… Affected: 8.0 through 8.4 |
| CVE-2020-7059 | 9.1 | Feb 10 | When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will… Affected: 8.0 through 8.4 |
Showing 20