java-sig-commits

java-sig-commits@lists.fedoraproject.org
  • 1 participants
  • 163 discussions
[Bug 1851420] New: CVE-2020-11996 tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS
by bugzilla@redhat.com
1 day, 20 hours
[Bug 1758994] New: CVE-2019-16370 gradle: PGP signing plugin security bypass [epel-6]
by bugzilla@redhat.com
2 days, 2 hours
[Bug 1756390] New: CVE-2019-15052 gradle: sends authentication credentials originally destined for the configured host [epel-6]
by bugzilla@redhat.com
2 days, 2 hours
[Bug 1848960] New: CVE-2020-14060 jackson-databind: serialization gadgets in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool
by bugzilla@redhat.com
2 days, 3 hours
[Bug 1764357] New: CVE-2019-10401 jenkins: Stored XSS vulnerability in expandable textbox form control
by bugzilla@redhat.com
2 days, 6 hours
[Bug 1848617] New: CVE-2019-17566 batik: SSRF via "xlink:href"
by bugzilla@redhat.com
3 days, 12 hours
[Bug 1826805] New: CVE-2020-11619 jackson-databind: Serialization gadgets in org.springframework:spring-aop
by bugzilla@redhat.com
3 days, 22 hours
[Bug 1826798] New: CVE-2020-11620 jackson-databind: Serialization gadgets in commons-jelly:commons-jelly
by bugzilla@redhat.com
3 days, 22 hours
[Bug 1821315] New: CVE-2020-11113 jackson-databind: jackson-databind: mishandles the interaction between serialization gadgets and typing related to org.apache.openjpa.ee.WASRegistryManagedRuntime which could result in remote command execution
by bugzilla@redhat.com
3 days, 22 hours
[Bug 1821311] New: CVE-2020-11112 jackson-databind: jackson-databind: mishandles the interaction between serialization gadgets and typing related to org.apache.commons.proxy.provider.remoting.RmiProvider which could result in remote command execution
by bugzilla@redhat.com
3 days, 22 hours
Results per page: