java-sig-commits

java-sig-commits@lists.fedoraproject.org
  • 1 participants
  • 441 discussions
[Bug 1548909] CVE-2018-8088 slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution
by bugzilla@redhat.com
5 years, 11 months
[Bug 1506612] CVE-2017-15095 jackson-databind: Unsafe deserialization due to incomplete black list ( incomplete fix for CVE-2017-7525)
by bugzilla@redhat.com
5 years, 11 months
[Bug 1528565] CVE-2017-17485 jackson-databind: Unsafe deserialization due to incomplete black list ( incomplete fix for CVE-2017-15095)
by bugzilla@redhat.com
5 years, 11 months
[Bug 1506612] CVE-2017-15095 jackson-databind: Unsafe deserialization due to incomplete black list ( incomplete fix for CVE-2017-7525)
by bugzilla@redhat.com
5 years, 11 months
[Bug 1578119] New: jmdns is outdated
by bugzilla@redhat.com
5 years, 11 months
[Bug 1529312] New: CVE-2017-17810 nasm: Segfault via mishandled macro calls in asm/preproc.c
by bugzilla@redhat.com
5 years, 11 months
[Bug 1524945] New: jenkins-plugin-script-security: Arbitrary file read vulnerability in Script Security Plugin (SECURITY-663 )
by bugzilla@redhat.com
5 years, 11 months
[Bug 1462702] CVE-2017-7525 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper
by bugzilla@redhat.com
5 years, 11 months
[Bug 1459158] New: CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
by bugzilla@redhat.com
5 years, 11 months
[Bug 1508110] CVE-2016-5002 xmlrpc: XML external entity vulnerability SSRF via a crafted DTD
by bugzilla@redhat.com
5 years, 11 months
Results per page: