eap7-netty vulnerabilities (Red Hat)
198 vulnerabilities.
eap7-nettyRed HatDeserialization of Untrusted Data7.7 Higheap7-nettyRed HatPath Traversal in Moment.js7.5 Higheap7-nettyRed HatPrototype Pollution in minimist9.8 Criticaleap7-nettyRed HatA flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss...7.5 Higheap7-nettyRed HatDeeply nested json in jackson-databind7.5 Higheap7-nettyRed HatApache ActiveMQ Artemis DoS7.5 Higheap7-nettyRed HatInfinite loop within Apache XercesJ xml parser6.5 Mediumeap7-nettyRed HatVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...5.3 Mediumeap7-nettyRed HatArbitrary code execution in H2 Console9.8 Criticaleap7-nettyRed HatA deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.8.8 Higheap7-nettyRed HatSQL injection in JDBC Appender in Apache Log4j V19.8 Criticaleap7-nettyRed HatDeserialization of untrusted data in JMSSink in Apache Log4j 1.x8.8 Higheap7-nettyRed HatRCE in H2 Console9.8 Criticaleap7-nettyRed HatApache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack9.0 Criticaleap7-nettyRed HatDeserialization of untrusted data in JMSAppender in Apache Log4j 1.27.5 Higheap7-nettyRed HatApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints10.0 Criticaleap7-nettyRed HatHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 Mediumeap7-nettyRed HatSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 Higheap7-nettyRed HatBzip2Decoder doesn't allow setting size restrictions for decompressed data7.5 Higheap7-nettyRed HatObservable Discrepancy in Wildfly Elytron5.3 Mediumeap7-nettyRed HatImproper Input Validation in Jakarta Expression Language5.3 Mediumeap7-nettyRed HatCross-site Scripting in Wildfly4.8 Mediumeap7-nettyRed HatPossible limited path traversal vulnerabily in Apache Commons IO4.8 Mediumeap7-nettyRed HatPossible request smuggling in HTTP/2 due missing validation of content-length5.9 Mediumeap7-nettyRed HatVelocity Sandbox Bypass8.8 Higheap7-nettyRed HatPossible request smuggling in HTTP/2 due missing validation5.9 Mediumeap7-nettyRed HatDenial of service in Undertow7.5 Higheap7-nettyRed HatUncontrolled Resource Consumption in Apache Thrift7.5 Higheap7-nettyRed HatLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files6.2 Mediumeap7-nettyRed HatSQL injection in hibernate-core7.4 Higheap7-nettyRed HatWildfly-OpenSSL memory leak flaw7.5 Higheap7-nettyRed HatHTTP Request Smuggling in Undertow4.8 Mediumeap7-nettyRed HatSession Fixation in WildFly Elytron7.5 Higheap7-nettyRed HatA flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed...7.5 Higheap7-nettyRed HatIncorrect Authorization in WildFly Elytron7.5 Higheap7-nettyRed HatThe issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to...5.3 Mediumeap7-nettyRed HatWildfly EJB Client causes DoS6.5 Mediumeap7-nettyRed HatA vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat...6.5 Mediumeap7-nettyRed HatSQL Injection in Hibernate ORM6.5 Mediumeap7-nettyRed HatWildfly Unsafe Deserialization Vulnerability6.6 Mediumeap7-nettyRed HatImproper Input Validation in Hibernate Validator5.3 Mediumeap7-nettyRed Hatdom4j allows External Entities by default which might enable XXE attacks9.8 Criticaleap7-nettyRed HatImproper Authorization in Undertoe8.6 Higheap7-nettyRed HatImproper Input Validation in Undertow8.1 Higheap7-nettyRed HatDenial of Service in Netty7.5 Higheap7-nettyRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Higheap7-nettyRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Higheap7-nettyRed HatPolymorphic deserialization of malicious object in jackson-databind7.5 Higheap7-nettyRed HatPolymorphic deserialization of malicious object in jackson-databind7.5 Higheap7-nettyRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Critical- Show moreLoading…