eap7-wildfly-modules vulnerabilities (Red Hat)
342 vulnerabilities.
eap7-wildfly-modulesRed HatDenial of Service attack on windows app using Netty5.5 Mediumeap7-wildfly-modulesRed HatSslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine7.5 Higheap7-wildfly-modulesRed HatDenial of Service attack on windows app using Netty5.5 Mediumeap7-wildfly-modulesRed HatNetty HttpPostRequestDecoder can OOM5.3 Mediumeap7-wildfly-modulesRed HatApache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK7.5 Higheap7-wildfly-modulesRed HatUndertow: outofmemoryerror due to @multipartconfig handling7.5 Higheap7-wildfly-modulesRed HatImproper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write8.8 Higheap7-wildfly-modulesRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Higheap7-wildfly-modulesRed HatApache MINA SSHD: Information disclosure bugs with RootedFilesystem5.0 Mediumeap7-wildfly-modulesRed HatBouncy Castle For Java LDAP injection vulnerability5.3 Mediumeap7-wildfly-modulesRed Hattough-cookie Prototype Pollution vulnerability6.5 Mediumeap7-wildfly-modulesRed Hatsemver vulnerable to Regular Expression Denial of Service5.3 Mediumeap7-wildfly-modulesRed Hatnetty-handler SniHandler 16MB allocation6.5 Mediumeap7-wildfly-modulesRed HatUse of temporary directory for file creation in `FileBackedOutputStream` in Guava5.5 Mediumeap7-wildfly-modulesRed HatCookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty2.4 Loweap7-wildfly-modulesRed HatOutOfMemoryError for large multipart without filename in Eclipse Jetty5.3 Mediumeap7-wildfly-modulesRed HatUndertow: infinite loop in sslconduit during close7.5 Higheap7-wildfly-modulesRed Hatjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 Higheap7-wildfly-modulesRed HatInfinite recursion in Jettison leads to denial of service when creating a crafted JSONArray5.9 Mediumeap7-wildfly-modulesRed HatApache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender7.5 Higheap7-wildfly-modulesRed HatUndertow client not checking server identity presented by server certificate in https connections7.5 Higheap7-wildfly-modulesRed HatInsecure Temporary File in RESTEasy5.5 Mediumeap7-wildfly-modulesRed HatWildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator7.4 Higheap7-wildfly-modulesRed HatApache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider5.5 Mediumeap7-wildfly-modulesRed HatApache CXF SSRF Vulnerability9.8 Criticaleap7-wildfly-modulesRed HatApache CXF directory listing / code exfiltration7.5 Higheap7-wildfly-modulesRed HatJettison Out-of-bounds Write vulnerability7.5 Higheap7-wildfly-modulesRed HatHAProxyMessageDecoder Stack Exhaustion DoS5.3 Mediumeap7-wildfly-modulesRed HatRemote Code execution in SnakeYAML8.3 Higheap7-wildfly-modulesRed HatApache MINA SSHD: Java unsafe deserialization vulnerability9.8 Criticaleap7-wildfly-modulesRed HatStack Overflow in Snakeyaml5.8 Mediumeap7-wildfly-modulesRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticaleap7-wildfly-modulesRed HatRemote code execution in HyperSQL DataBase8.0 Higheap7-wildfly-modulesRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Higheap7-wildfly-modulesRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Higheap7-wildfly-modulesRed HatStack Buffer Overflow in Woodstox6.5 Mediumeap7-wildfly-modulesRed HatStack Buffer Overflow in Jettison6.5 Mediumeap7-wildfly-modulesRed HatStack Buffer Overflow in Jettison6.5 Mediumeap7-wildfly-modulesRed HatDoS in SnakeYAML6.5 Mediumeap7-wildfly-modulesRed HatA flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response...7.5 Higheap7-wildfly-modulesRed HatA flaw was found in Undertow. A potential security issue in flow control handling by the browser...7.5 Higheap7-wildfly-modulesRed HatDenial of Service (DoS)7.5 Higheap7-wildfly-modulesRed Hatjsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabled6.1 Mediumeap7-wildfly-modulesRed HatXNIO `notifyReadClosed` method logging message to unexpected end7.5 Higheap7-wildfly-modulesRed Hatwildfly-core allows user with access to management interface to access vault expression, retrieve item from vault3.3 Loweap7-wildfly-modulesRed HatUndertow vulnerable to Dos via Large AJP request7.5 Higheap7-wildfly-modulesRed HatApache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets7.5 Higheap7-wildfly-modulesRed HatUndertow vulnerable to Denial of Service (DoS) attacks7.5 Higheap7-wildfly-modulesRed HatUndertow vulnerable to memory exhaustion due to buffer leak7.5 Higheap7-wildfly-modulesRed Hatundertow Race Condition vulnerability5.9 Medium- Show moreLoading…