eap8-hibernate-search-backend-lucene vulnerabilities (Red Hat)
20 vulnerabilities.
eap8-hibernate-search-backend-luceneRed HatJastow: jastow cross-site scripting attack due to unsanitized uri6.5 Mediumeap8-hibernate-search-backend-luceneRed HatUnbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.8.7 Higheap8-hibernate-search-backend-luceneRed HatPKIX draft CompositeVerifier accepts empty signature sequence as valid.6.3 Mediumeap8-hibernate-search-backend-luceneRed HatNon-constant time comparisons risk private key leakage in FrodoKEM.8.9 Higheap8-hibernate-search-backend-luceneRed HatLDAP Injection Vulnerability in LDAPStoreHelper.java5.5 Mediumeap8-hibernate-search-backend-luceneRed HatGOSTCTR implementation unable to process more than 255 blocks correctly9.3 Criticaleap8-hibernate-search-backend-luceneRed HatPlexus-Utils has a Directory Traversal vulnerability in its extractFile method8.8 Higheap8-hibernate-search-backend-luceneRed HatApache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation9.3 Criticaleap8-hibernate-search-backend-luceneRed Hatminimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions7.5 Higheap8-hibernate-search-backend-luceneRed Hatc3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property8.9 Higheap8-hibernate-search-backend-luceneRed Hatmchange-commons-java: Remote Code Execution via JNDI Reference Resolution8.9 Higheap8-hibernate-search-backend-luceneRed Hatminimatch has a ReDoS via repeated wildcards with non-matching literal in pattern8.7 Higheap8-hibernate-search-backend-luceneRed HatXXE vulnerability in Eclipse JGit6.8 Mediumeap8-hibernate-search-backend-luceneRed HatOrg.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli8.1 Higheap8-hibernate-search-backend-luceneRed HatJberet: jberet-core logging database credentials6.5 Mediumeap8-hibernate-search-backend-luceneRed HatEap: oidc app attempting to access the second tenant, the user should be prompted to log7.3 Higheap8-hibernate-search-backend-luceneRed HatEap: wildfly-elytron has a ssrf security issue7.3 Higheap8-hibernate-search-backend-luceneRed HatEap-galleon: custom provisioning creates unsecured http-invoker6.8 Mediumeap8-hibernate-search-backend-luceneRed HatNetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass8.7 Higheap8-hibernate-search-backend-luceneRed HatNetty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing7.5 High