eap7-hibernate-java8 vulnerabilities (Red Hat)
186 vulnerabilities.
-
eap7-hibernate-java8Red Hat c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property 8.9 High -
eap7-hibernate-java8Red Hat mchange-commons-java: Remote Code Execution via JNDI Reference Resolution 8.9 High -
eap7-hibernate-java8Red Hat Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection 8.3 High -
eap7-hibernate-java8Red Hat Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf 9.6 Critical -
eap7-hibernate-java8Red Hat Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded 7.5 High -
eap7-hibernate-java8Red Hat Undertow: undertow madeyoureset http/2 ddos vulnerability 7.5 High -
eap7-hibernate-java8Red Hat Apache CXF: Untrusted JMS configuration can lead to RCE 9.8 Critical -
eap7-hibernate-java8Red Hat jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data 8.7 High -
eap7-hibernate-java8Red Hat XXE vulnerability in Eclipse JGit 6.8 Medium -
eap7-hibernate-java8Red Hat hornetq vulnerable to file overwrite, sensitive information disclosure 7.1 High -
eap7-hibernate-java8Red Hat Undertow: cookie smuggling/spoofing 7.4 High -
eap7-hibernate-java8Red Hat Undertow: unrestricted request storage leads to memory exhaustion 7.5 High -
eap7-hibernate-java8Red Hat Stack overflow in Protocol Buffers Java Lite 8.7 High -
eap7-hibernate-java8Red Hat Eap: wildfly-elytron has a ssrf security issue 7.3 High -
eap7-hibernate-java8Red Hat Xnio: stackoverflowexception when the chain of notifier states becomes problematically big 7.5 High -
eap7-hibernate-java8Red Hat Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol 7.5 High -
eap7-hibernate-java8Red Hat Undertow: directory traversal vulnerability 5.3 Medium -
eap7-hibernate-java8Red Hat Eap-galleon: custom provisioning creates unsecured http-invoker 6.8 Medium -
eap7-hibernate-java8Red Hat Eap-7: heap exhaustion via deserialization 7.5 High -
eap7-hibernate-java8Red Hat Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
eap7-hibernate-java8Red Hat Undertow: ajp request closes connection exceeding maxrequestsize 7.5 High -
eap7-hibernate-java8Red Hat Wildfly-core: management user rbac permission allows unexpected reading of system-properties to an unauthorized actor 6.5 Medium -
eap7-hibernate-java8Red Hat Apache Santuario: Private Key disclosure in debug-log output 6.5 Medium -
eap7-hibernate-java8Red Hat Netty: HTTP Request Smuggling due to malformed Transfer-Encoding 6.5 Medium -
eap7-hibernate-java8Red Hat Netty: HttpClientCodec response desynchronization 7.3 High -
eap7-hibernate-java8Red Hat Netty: Lz4FrameDecoder resource exhaustion 7.5 High -
eap7-hibernate-java8Red Hat Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization 5.8 Medium -
eap7-hibernate-java8Red Hat Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation 2.9 Low -
eap7-hibernate-java8Red Hat Netty MadeYouReset HTTP/2 DDoS Vulnerability 8.2 High -
eap7-hibernate-java8Red Hat Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK 7.5 High -
eap7-hibernate-java8Red Hat Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write 8.8 High -
eap7-hibernate-java8Red Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
eap7-hibernate-java8Red Hat Apache MINA SSHD: Information disclosure bugs with RootedFilesystem 5.0 Medium -
eap7-hibernate-java8Red Hat Bouncy Castle For Java LDAP injection vulnerability 5.3 Medium -
eap7-hibernate-java8Red Hat tough-cookie Prototype Pollution vulnerability 6.5 Medium -
eap7-hibernate-java8Red Hat semver vulnerable to Regular Expression Denial of Service 5.3 Medium -
eap7-hibernate-java8Red Hat netty-handler SniHandler 16MB allocation 6.5 Medium -
eap7-hibernate-java8Red Hat Use of temporary directory for file creation in `FileBackedOutputStream` in Guava 5.5 Medium -
eap7-hibernate-java8Red Hat Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty 2.4 Low -
eap7-hibernate-java8Red Hat OutOfMemoryError for large multipart without filename in Eclipse Jetty 5.3 Medium -
eap7-hibernate-java8Red Hat Apache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender 7.5 High -
eap7-hibernate-java8Red Hat Undertow client not checking server identity presented by server certificate in https connections 7.5 High -
eap7-hibernate-java8Red Hat Wildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator 7.4 High -
eap7-hibernate-java8Red Hat A flaw was found in Undertow. A potential security issue in flow control handling by the browser... 7.5 High -
eap7-hibernate-java8Red Hat wildfly-core allows user with access to management interface to access vault expression, retrieve item from vault 3.3 Low -
eap7-hibernate-java8Red Hat Undertow vulnerable to memory exhaustion due to buffer leak 7.5 High -
eap7-hibernate-java8Red Hat undertow Race Condition vulnerability 5.9 Medium -
eap7-hibernate-java8Red Hat Deeply nested json in jackson-databind 7.5 High -
eap7-hibernate-java8Red Hat SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way 7.5 High -
eap7-hibernate-java8Red Hat Bzip2Decoder doesn't allow setting size restrictions for decompressed data 7.5 High - Show olderLoading…