Oracle Communications Lsms vulnerabilities

10 CVEs affecting Oracle Communications Lsms, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-21783, published 2021-03-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-0235, published 2015-01-28. High severity, CVSS 10.0. EPSS: 94.6% chance of exploitation in the next 30 days. Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors…
CVE-2020-10543, published 2020-06-05. High severity, CVSS 8.2. EPSS: 11.3% chance of exploitation in the next 30 days. Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
CVE-2018-3693, published 2018-07-10. Medium severity, CVSS 5.6. EPSS: 8.6% chance of exploitation in the next 30 days. Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer…
CVE-2020-12723, published 2020-06-05. High severity, CVSS 7.5. EPSS: 6% chance of exploitation in the next 30 days. regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
CVE-2021-21783, published 2021-03-25. Critical severity, CVSS 9.8. EPSS: 5.3% chance of exploitation in the next 30 days. A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an…
CVE-2020-10878, published 2020-06-05. High severity, CVSS 8.6. EPSS: 4.9% chance of exploitation in the next 30 days. Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of…
CVE-2018-20033, published 2019-02-25. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to corrupt the memory by allocating /…
CVE-2018-20034, published 2019-03-21. High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days. A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a…
CVE-2018-20032, published 2019-03-21. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination…
CVE-2018-20031, published 2019-03-21. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a…