java-sig-commits

java-sig-commits@lists.fedoraproject.org
  • 1 participants
  • 391 discussions
[Bug 1821304] New: CVE-2020-11111 jackson-databind: jackson-databind: mishandles the interaction between serialization gadgets and typing related to org.apache.activemq.* which could result in remote command execution
by bugzilla@redhat.com
4 months
[Bug 1826805] New: CVE-2020-11619 jackson-databind: Serialization gadgets in org.springframework:spring-aop
by bugzilla@redhat.com
4 months
[Bug 1826798] New: CVE-2020-11620 jackson-databind: Serialization gadgets in commons-jelly:commons-jelly
by bugzilla@redhat.com
4 months
[Bug 1821311] New: CVE-2020-11112 jackson-databind: jackson-databind: mishandles the interaction between serialization gadgets and typing related to org.apache.commons.proxy.provider.remoting.RmiProvider which could result in remote command execution
by bugzilla@redhat.com
4 months
[Bug 1819208] New: CVE-2020-10968 jackson-databind: serialization gadgets in bus-proxy
by bugzilla@redhat.com
4 months
[Bug 1702439] New: CVE-2019-0223 qpid-proton: TLS Man in the Middle Vulnerability
by bugzilla@redhat.com
4 months
[Bug 1822759] New: CVE-2020-1950 tika: excessive memory usage in PSDParser
by bugzilla@redhat.com
4 months
[Bug 1799475] New: CVE-2020-5398 springframework: RFD attack via Content-Disposition Header sourced from request input by Spring MVC or Spring WebFlux Application
by bugzilla@redhat.com
4 months
[Bug 1703402] New: CVE-2019-2692 mysql-connector-java: privilege escalation in MySQL connector
by bugzilla@redhat.com
4 months
[Bug 1816216] New: netty: compression/decompression codecs don't enforce limits on buffer allocation sizes
by bugzilla@redhat.com
4 months
Results per page: