Filter
redhat/eap7-elytron-webApache Commons Codec information disclosure
9.8
First published (updated )
Oracle Policy AutomationIn Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive s…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
maven/com.fasterxml.jackson.core:jackson-databindSSRF
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache TomEEThe ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory all…
7.5
First published (updated )
redhat/eap7-nettyPossible request smuggling in HTTP/2 due missing validation
6.5
First published (updated )
NetApp OnCommand API ServicesNetApp OnCommand API Services before 1.2P3 logs the LDAP BIND password when a user attempts to log i…
6.5
First published (updated )
redhat/eap7-elytron-webPossible request smuggling in HTTP/2 due missing validation of content-length
5.9
First published (updated )