java-sig-commits

java-sig-commits@lists.fedoraproject.org
  • 1 participants
  • 510 discussions
[Bug 1548909] CVE-2018-8088 slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution
by bugzilla@redhat.com
4 years, 8 months
[Bug 1665601] CVE-2018-1000873 jackson-modules-java8: DoS due to an Improper Input Validation
by bugzilla@redhat.com
4 years, 8 months
[Bug 1618573] CVE-2018-11771 apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip
by bugzilla@redhat.com
4 years, 8 months
[Bug 1713280] New: CVE-2019-0221 tomcat: XSS in SSI printenv [epel-all]
by bugzilla@redhat.com
4 years, 8 months
[Bug 1723712] New: CVE-2019-10072 tomcat: denial of service on vulnerable installation [fedora-all]
by bugzilla@redhat.com
4 years, 8 months
[Bug 1548282] CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users
by bugzilla@redhat.com
4 years, 8 months
[Bug 1557362] shutdown_wait option is not working for Tomcat
by bugzilla@redhat.com
4 years, 8 months
[Bug 1607580] CVE-2018-8034 tomcat: Host name verification missing in WebSocket client
by bugzilla@redhat.com
4 years, 8 months
[Bug 1579611] CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
by bugzilla@redhat.com
4 years, 8 months
[Bug 1607580] CVE-2018-8034 tomcat: Host name verification missing in WebSocket client
by bugzilla@redhat.com
4 years, 8 months
Results per page: