java-sig-commits

java-sig-commits@lists.fedoraproject.org
  • 1 participants
  • 409 discussions
[Bug 1872707] New: CVE-2020-24616 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP)
by bugzilla@redhat.com
2 years, 5 months
[Bug 1797065] New: CVE-2020-2104 jenkins: Memory usage graphs accessible to anyone with Overall/Read
by bugzilla@redhat.com
2 years, 5 months
[Bug 1797062] New: CVE-2020-2103 jenkins: Exposed session identifiers on user detail object in the whoAmI diagnostic page
by bugzilla@redhat.com
2 years, 5 months
[Bug 1881158] New: CVE-2020-5421 springframework: RFD protection bypass via jsessionid
by bugzilla@redhat.com
2 years, 6 months
[Bug 1767483] New: CVE-2019-10086 apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default
by bugzilla@redhat.com
2 years, 6 months
[Bug 1799475] New: CVE-2020-5398 springframework: RFD attack via Content-Disposition Header sourced from request input by Spring MVC or Spring WebFlux Application
by bugzilla@redhat.com
2 years, 6 months
[Bug 1785699] New: CVE-2019-12418 tomcat: local privilege escalation
by bugzilla@redhat.com
2 years, 6 months
[Bug 1857040] New: CVE-2020-13934 tomcat: OutOfMemoryException caused by HTTP/2 connection leak could lead to DoS
by bugzilla@redhat.com
2 years, 6 months
[Bug 1851420] New: CVE-2020-11996 tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS
by bugzilla@redhat.com
2 years, 6 months
[Bug 1764640] New: CVE-2019-12402 apache-commons-compress: Infinite loop in name encoding algorithm
by bugzilla@redhat.com
2 years, 6 months
Results per page: