java-sig-commits

java-sig-commits@lists.fedoraproject.org
  • 1 participants
  • 225 discussions
[Bug 1908838] New: CVE-2020-26259 xstream: arbitrary file deletion on the local host when unmarshalling [fedora-all]
by bugzilla@redhat.com
1 year, 1 month
[Bug 1908833] New: CVE-2020-26258 xstream: Server-Side Forgery Request vulnerability can be activated when unmarshalling [fedora-all]
by bugzilla@redhat.com
1 year, 1 month
[Bug 1872707] New: CVE-2020-24616 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP)
by bugzilla@redhat.com
1 year, 1 month
[Bug 1797065] New: CVE-2020-2104 jenkins: Memory usage graphs accessible to anyone with Overall/Read
by bugzilla@redhat.com
1 year, 1 month
[Bug 1797062] New: CVE-2020-2103 jenkins: Exposed session identifiers on user detail object in the whoAmI diagnostic page
by bugzilla@redhat.com
1 year, 1 month
[Bug 1881158] New: CVE-2020-5421 springframework: RFD protection bypass via jsessionid
by bugzilla@redhat.com
1 year, 1 month
[Bug 1767483] New: CVE-2019-10086 apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default
by bugzilla@redhat.com
1 year, 1 month
[Bug 1950667] New: ant-1.10.10 is available
by bugzilla@redhat.com
1 year, 1 month
[Bug 1799475] New: CVE-2020-5398 springframework: RFD attack via Content-Disposition Header sourced from request input by Spring MVC or Spring WebFlux Application
by bugzilla@redhat.com
1 year, 2 months
[Bug 1785699] New: CVE-2019-12418 tomcat: local privilege escalation
by bugzilla@redhat.com
1 year, 2 months
Results per page: