slf4j vulnerabilities (Red Hat)
87 vulnerabilities.
slf4jRed HatCross-Site Scripting (XSS) in jquery6.1 Mediumslf4jRed HatForeman before 1.9.0 allows remote authenticated users with the edit_users permission to edit...6.0 Mediumslf4jRed HatForeman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,...5.0 Mediumslf4jRed HatForeman before 1.7.5 allows remote authenticated users to bypass organization and location...4.0 Mediumslf4jRed HatForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...5.0 Mediumslf4jRed HatCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...4.3 Mediumslf4jRed HatThe isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used...4.9 Mediumslf4jRed HatThe EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise...5.5 Mediumslf4jRed HatThe mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism,...5.0 Mediumslf4jRed HatRace condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote...6.8 Mediumslf4jRed HatThe deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP...4.3 Mediumslf4jRed HatSimpleGeo python-oauth2 does not check the nonce allowing replay attacks4.3 Mediumslf4jRed HatNetty denial of service vulnerability5.0 Mediumslf4jRed HatThe EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise...5.5 Mediumslf4jRed HatRed Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0...3.7 Lowslf4jRed HatThe org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and...4.3 Mediumslf4jRed HatSimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces5.8 Mediumslf4jRed HatImproper Control of Generation of Code in HawtJNI4.4 Mediumslf4jRed HatInadequate Encryption Strength in Apache CXF6.4 Mediumslf4jRed HatImproper Input Validation in Apache Tomcat6.4 Mediumslf4jRed HatImproper Authentication in Apache Tomcat6.8 Mediumslf4jRed HatJboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypass5.3 Mediumslf4jRed HatJboss enterprise application platform: org.jboss.as.ejb3: jboss enterprise application platform: access restriction bypass via improper ejb method authorization6.5 Mediumslf4jRed HatImproper Authentication in Apache CXF4.3 Mediumslf4jRed HatXML Signature/Encryption Not Validated in Apache CXF10.0 Highslf4jRed HatUser confusion in IronJacamar4.3 Mediumslf4jRed HatThe servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA...6.8 Mediumslf4jRed HatRemote web-service operation execution in Apache CXF4.3 Mediumslf4jRed HatMultiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in...2.6 Lowslf4jRed HatOracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup,...2.1 Lowslf4jRed HatOpenID4Java does not verify that Attribute Exchange (AX) information is signed5.8 Mediumslf4jRed Hatjboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss...6.8 Mediumslf4jRed HatJBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4...5.0 Mediumslf4jRed HatCross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server...4.3 Medium