eap7-jackson-databind vulnerabilities (Red Hat)
227 vulnerabilities.
eap7-jackson-databindRed HatNetty: HTTP Request Smuggling due to malformed Transfer-Encoding6.5 Mediumeap7-jackson-databindRed HatNetty: HttpClientCodec response desynchronization7.3 Higheap7-jackson-databindRed HatNetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization5.8 Mediumeap7-jackson-databindRed HatNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 Higheap7-jackson-databindRed HatNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Loweap7-jackson-databindRed HatNetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 Mediumeap7-jackson-databindRed HatNetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 Higheap7-jackson-databindRed HatApache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK7.5 Higheap7-jackson-databindRed HatUndertow: outofmemoryerror due to @multipartconfig handling7.5 Higheap7-jackson-databindRed HatUndertow: infinite loop in sslconduit during close7.5 Higheap7-jackson-databindRed HatApache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender7.5 Higheap7-jackson-databindRed HatUndertow client not checking server identity presented by server certificate in https connections7.5 Higheap7-jackson-databindRed HatWildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator7.4 Higheap7-jackson-databindRed HatApache CXF SSRF Vulnerability9.8 Criticaleap7-jackson-databindRed HatApache CXF directory listing / code exfiltration7.5 Higheap7-jackson-databindRed HatJettison Out-of-bounds Write vulnerability7.5 Higheap7-jackson-databindRed HatHAProxyMessageDecoder Stack Exhaustion DoS5.3 Mediumeap7-jackson-databindRed HatRemote Code execution in SnakeYAML8.3 Higheap7-jackson-databindRed HatApache MINA SSHD: Java unsafe deserialization vulnerability9.8 Criticaleap7-jackson-databindRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticaleap7-jackson-databindRed HatRemote code execution in HyperSQL DataBase8.0 Higheap7-jackson-databindRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Higheap7-jackson-databindRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Higheap7-jackson-databindRed HatStack Buffer Overflow in Woodstox6.5 Mediumeap7-jackson-databindRed HatStack Buffer Overflow in Jettison6.5 Mediumeap7-jackson-databindRed HatStack Buffer Overflow in Jettison6.5 Mediumeap7-jackson-databindRed HatA flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response...7.5 Higheap7-jackson-databindRed HatA flaw was found in Undertow. A potential security issue in flow control handling by the browser...7.5 Higheap7-jackson-databindRed HatXNIO `notifyReadClosed` method logging message to unexpected end7.5 Higheap7-jackson-databindRed HatUndertow vulnerable to Dos via Large AJP request7.5 Higheap7-jackson-databindRed HatApache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets7.5 Higheap7-jackson-databindRed HatWildfly-Core user account mismanagement7.8 Higheap7-jackson-databindRed HatThis is a concurrency issue that can result in the wrong caller principal being returned from the...5.3 Mediumeap7-jackson-databindRed HatLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Mediumeap7-jackson-databindRed HatDeserialization of Untrusted Data7.7 Higheap7-jackson-databindRed HatPath Traversal in Moment.js7.5 Higheap7-jackson-databindRed HatPrototype Pollution in minimist9.8 Criticaleap7-jackson-databindRed HatA flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss...7.5 Higheap7-jackson-databindRed HatDeeply nested json in jackson-databind7.5 Higheap7-jackson-databindRed HatApache ActiveMQ Artemis DoS7.5 Higheap7-jackson-databindRed HatInfinite loop within Apache XercesJ xml parser6.5 Mediumeap7-jackson-databindRed HatVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...5.3 Mediumeap7-jackson-databindRed HatArbitrary code execution in H2 Console9.8 Criticaleap7-jackson-databindRed HatA deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.8.8 Higheap7-jackson-databindRed HatSQL injection in JDBC Appender in Apache Log4j V19.8 Criticaleap7-jackson-databindRed HatDeserialization of untrusted data in JMSSink in Apache Log4j 1.x8.8 Higheap7-jackson-databindRed HatRCE in H2 Console9.8 Criticaleap7-jackson-databindRed HatApache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack9.0 Criticaleap7-jackson-databindRed HatDeserialization of untrusted data in JMSAppender in Apache Log4j 1.27.5 Higheap7-jackson-databindRed HatApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints10.0 Critical- Show moreLoading…