| Denial of Service in Google GuavaCVE-2018-10237 · GHSA-MVR2-9PJ6-7W5J |
com.google.guava:guava-jdk5com.google.guava:guava |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Encoded URIs can access WEB-INF directory in Eclipse JettyCVE-2021-34429 · GHSA-VJV5-GP2W-65VM |
org.eclipse.jetty:jetty-webappRed Hat Enterprise Linux 7/jetty |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Local information disclosure via system temporary directoryCVE-2021-28168 · GHSA-C43Q-5HPJ-4CRV |
org.glassfish.jersey.core:jersey-commonRed Hat Integration Camel Quarkus 1/jersey-common |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Possible request smuggling in HTTP/2 due missing validation of content-lengthCVE-2021-21409 · GHSA-F256-J965-7F32 |
io.netty:netty-codec-http2io.netty:netty |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| HTTP request smuggling in nettyCVE-2021-43797 · GHSA-WX5J-54MM-RQQQ |
io.netty:netty-codec-httpio.netty:netty |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Polymorphic Typing issue in FasterXML jackson-databindCVE-2019-14540 · GHSA-H822-R4R5-V8JG |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Insecure Deserialization in Apache Commons BeanutilsCVE-2019-10086 · GHSA-6PHF-73Q6-GH87 |
commons-beanutils:commons-beanutilsRed Hat AMQ Broker 7/commons-beanutils |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Improper Restriction of XML External Entity Reference in jackson-mapper-aslCVE-2019-10172 · GHSA-R6J9-8759-G62W |
org.codehaus.jackson:jackson-mapper-aslRed Hat BPM Suite 6/jackson-mapper-asl |
MavenRed Hat |
زیاد
|
اصلاح اعلام نشده |
|
| Potential remote code execution in Apache TomcatCVE-2020-9484 · GHSA-344F-F5VG-2JFJ |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Infinite Loop in Apache TomcatCVE-2020-13935 · GHSA-M7JV-HQ7H-MQ7C |
org.apache.tomcat.embed:tomcat-embed-websocketorg.apache.tomcat:tomcat-websocket |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Exposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2021-25122 · GHSA-J39C-C8HJ-X4J3 |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-coyote |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Polymorphic deserialization of malicious object in jackson-databindCVE-2019-14893 · GHSA-QMQC-X3R4-6V39 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XML External Entity (XXE) Injection in Jackson DatabindCVE-2020-25649 · GHSA-288C-CQ4H-88GQ |
com.fasterxml.jackson.core:jackson-databindA-MQ Clients 2/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10672 · GHSA-95CM-88F5-F2C7 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Deserialization of untrusted data in Jackson DatabindCVE-2020-14195 · GHSA-MC6H-4QGP-37QH |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Deserialization of untrusted data in Jackson DatabindCVE-2020-14062 · GHSA-C265-37VJ-CWCC |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11111 · GHSA-V3XW-C963-F5HC |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11620 · GHSA-H4RC-386G-6M85 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11112 · GHSA-58PP-9C76-5625 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Deserialization of untrusted data in Jackson DatabindCVE-2020-14060 · GHSA-J823-4QCH-3RGM |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
