java-sig-commits

java-sig-commits@lists.fedoraproject.org
  • 1 participants
  • 239 discussions
[Bug 1758994] New: CVE-2019-16370 gradle: PGP signing plugin security bypass [epel-6]
by bugzilla@redhat.com
2 days, 2 hours
[Bug 1756390] New: CVE-2019-15052 gradle: sends authentication credentials originally destined for the configured host [epel-6]
by bugzilla@redhat.com
2 days, 2 hours
[Bug 1764357] New: CVE-2019-10401 jenkins: Stored XSS vulnerability in expandable textbox form control
by bugzilla@redhat.com
2 days, 6 hours
[Bug 1826805] New: CVE-2020-11619 jackson-databind: Serialization gadgets in org.springframework:spring-aop
by bugzilla@redhat.com
3 days, 22 hours
[Bug 1826798] New: CVE-2020-11620 jackson-databind: Serialization gadgets in commons-jelly:commons-jelly
by bugzilla@redhat.com
3 days, 22 hours
[Bug 1821315] New: CVE-2020-11113 jackson-databind: jackson-databind: mishandles the interaction between serialization gadgets and typing related to org.apache.openjpa.ee.WASRegistryManagedRuntime which could result in remote command execution
by bugzilla@redhat.com
3 days, 22 hours
[Bug 1821311] New: CVE-2020-11112 jackson-databind: jackson-databind: mishandles the interaction between serialization gadgets and typing related to org.apache.commons.proxy.provider.remoting.RmiProvider which could result in remote command execution
by bugzilla@redhat.com
3 days, 22 hours
[Bug 1821304] New: CVE-2020-11111 jackson-databind: jackson-databind: mishandles the interaction between serialization gadgets and typing related to org.apache.activemq.* which could result in remote command execution
by bugzilla@redhat.com
3 days, 22 hours
[Bug 1819713] New: CVE-2019-10399 jenkins-script-security-plugin: handling of property names in property expressions in increment and decrement expressions allowed attackers to execute arbitrary code in sandboxed scripts
by bugzilla@redhat.com
3 days, 22 hours
[Bug 1819708] New: CVE-2019-10400 jenkins-script-security-plugin: handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts
by bugzilla@redhat.com
3 days, 22 hours
Results per page: