java-sig-commits

java-sig-commits@lists.fedoraproject.org
  • 1 participants
  • 296 discussions
[Bug 1942556] New: CVE-2021-21344 xstream: arbitrary code execution via crafted input stream [fedora-all]
by bugzilla@redhat.com
2 years, 5 months
[Bug 1942551] New: CVE-2021-21343 xstream: arbitrary file deletion on the local host via crafted input stream [fedora-all]
by bugzilla@redhat.com
2 years, 5 months
[Bug 1942547] New: CVE-2021-21342 xstream: SSRF via crafted input stream [fedora-all]
by bugzilla@redhat.com
2 years, 5 months
[Bug 1942540] New: CVE-2021-21341 xstream: allow a remote attacker to cause DoS only by manipulating the processed input stream [fedora-all]
by bugzilla@redhat.com
2 years, 5 months
[Bug 1908838] New: CVE-2020-26259 xstream: arbitrary file deletion on the local host when unmarshalling [fedora-all]
by bugzilla@redhat.com
2 years, 5 months
[Bug 1908833] New: CVE-2020-26258 xstream: Server-Side Forgery Request vulnerability can be activated when unmarshalling [fedora-all]
by bugzilla@redhat.com
2 years, 5 months
[Bug 1987365] New: apache-ivy: FTBFS in Fedora rawhide/f35
by bugzilla@redhat.com
2 years, 5 months
[Bug 1872707] New: CVE-2020-24616 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP)
by bugzilla@redhat.com
2 years, 5 months
[Bug 1797065] New: CVE-2020-2104 jenkins: Memory usage graphs accessible to anyone with Overall/Read
by bugzilla@redhat.com
2 years, 5 months
[Bug 1797062] New: CVE-2020-2103 jenkins: Exposed session identifiers on user detail object in the whoAmI diagnostic page
by bugzilla@redhat.com
2 years, 5 months
Results per page: