java-sig-commits

java-sig-commits@lists.fedoraproject.org
  • 1 participants
  • 422 discussions
[Bug 1725807] New: CVE-2019-12384 jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution
by bugzilla@redhat.com
4 years, 1 month
[Bug 1725795] New: CVE-2019-12814 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafter JSON message.
by bugzilla@redhat.com
4 years, 1 month
[Bug 1713215] New: CVE-2016-10750 hazelcast: java deserialization in join cluster procedure leading to remote code execution
by bugzilla@redhat.com
4 years, 1 month
[Bug 1701056] New: CVE-2019-0232 tomcat: Remote Code Execution on Windows
by bugzilla@redhat.com
4 years, 1 month
[Bug 1698508] New: CVE-2019-11065 gradle: Insecure HTTP URL used to download dependencies leading to possibly maliciously compromised artifacts.
by bugzilla@redhat.com
4 years, 1 month
[Bug 1696034] New: CVE-2019-7611 elasticsearch: Improper permission issue when attaching a new name to an index
by bugzilla@redhat.com
4 years, 1 month
[Bug 1713275] New: CVE-2019-0221 tomcat: XSS in SSI printenv
by bugzilla@redhat.com
4 years, 1 month
[Bug 1735216] New: fop: FTBFS in Fedora rawhide/f31
by bugzilla@redhat.com
4 years, 2 months
[Bug 1710644] New: CVE-2017-2582 picketlink: picketlink, keycloak: SAML request parser replaces special strings with system properties [fedora-all]
by bugzilla@redhat.com
4 years, 3 months
[Bug 1709380] New: CVE-2018-20200 okhttp: certificate pinning bypass [fedora-all]
by bugzilla@redhat.com
4 years, 3 months
Results per page: