Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5A flaw was found in OpenLDAP.EPSS 3.4%May 18, 2021
- Medium5.9A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference.EPSS 3.6%May 14, 2021
- High7.5cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet.EPSS 8.0%Dec 19, 2019
- High7.8Apache HTTP Server Privilege Escalation VulnerabilityKEVEPSS 65.0%Apr 8, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphi…Jan 2, 2019
- Critical10.0FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2…Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes f…Jan 2, 2019
- Critical9.8Red Hat JBoss RichFaces Framework Expression Language Injection VulnerabilityKEVEPSS 74.2%Nov 6, 2018
- Medium5.9The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC…Feb 28, 2018
- Critical9.8FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for t…Feb 26, 2018
- Critical9.8Red Hat JBoss Application Server Remote Code Execution VulnerabilityKEVEPSS 90.7%Oct 4, 2017
- High8.1Apache Tomcat on Windows Remote Code Execution VulnerabilityKEVEPSS 99.6%Sep 19, 2017
- Medium5.3When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager.Aug 10, 2017
- Critical9.8Apache Tomcat Remote Code Execution VulnerabilityKEVEPSS 90.3%Apr 6, 2017
- Critical9.8Apache Shiro Code Execution VulnerabilityKEVEPSS 93.0%Jun 7, 2016
- High8.8Red Hat Linux JBoss Seam 2 Remote Code Execution VulnerabilityKEVEPSS 83.4%Aug 4, 2010
- High7.5Red Hat JBoss Information Disclosure VulnerabilityKEVEPSS 61.5%Apr 28, 2010
- Medium5.3Red Hat JBoss Authentication Bypass VulnerabilityKEVEPSS 79.6%Apr 28, 2010
43 records · page 2 of 2
PreviousNext