xerces-j2 vulnerabilities (Red Hat)
124 vulnerabilities.
xerces-j2Red HatThe SecurityAssociation.getCredential method in JBoss Enterprise Application Platform (EAP)...5.8 Mediumxerces-j2Red HatThe CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web...4.0 Mediumxerces-j2Red HatThe (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss Enterprise...6.8 Mediumxerces-j2Red HatThe NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0,...2.1 Lowxerces-j2Red HatCross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application...4.3 Mediumxerces-j2Red HatXML Signature/Encryption Not Validated in Apache CXF10.0 Highxerces-j2Red HatAuthentication Bypass in Apache Tomcat4.3 Mediumxerces-j2Red HatThe mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node...5.0 Mediumxerces-j2Red HatJGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before...3.3 Lowxerces-j2Red HatCross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss...6.0 Mediumxerces-j2Red HatThe W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss...5.0 Mediumxerces-j2Red Hattwiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments,...2.1 Lowxerces-j2Red HatImproper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework7.5 Highxerces-j2Red Hatjboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss...6.8 Mediumxerces-j2Red HatStack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache...4.3 Mediumxerces-j2Red HatImproper Neutralization of Input During Web Page Generation in Apache Tomcat4.3 Mediumxerces-j2Red HatImproper Limitation of a Pathname to a Restricted Directory in Apache Tomcat1.2 Lowxerces-j2Red HatImproper Neutralization of Input During Web Page Generation in Apache Tomcat4.3 Mediumxerces-j2Red HatMemory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache...5.0 Mediumxerces-j2Red HatThe (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow...5.0 Mediumxerces-j2Red HatThe MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD)...2.1 Lowxerces-j2Red HatMultiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC...6.8 Mediumxerces-j2Red HatApache MyFaces Cross-site Scripting vulnerability4.0 Mediumxerces-j2Red HatExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat2.6 Lowxerces-j2Red HatThe ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15,...4.3 Mediumxerces-j2Red HatImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat4.3 Mediumxerces-j2Red HatApache Tomcat Directory Traversal vulnerability5.8 Mediumxerces-j2Red HatTwiddle in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2...2.1 Lowxerces-j2Red HatMultiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server...4.3 Mediumxerces-j2Red HatCross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise...4.3 Mediumxerces-j2Red HatApache Tomcat affected by vulnerability in TLS and SSL protocol5.8 Mediumxerces-j2Red HatThe mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended...5.0 Mediumxerces-j2Red HatThe ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the...2.6 Lowxerces-j2Red HatDenial of service in Apache Xerces25.0 Mediumxerces-j2Red HatMultiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable...10.0 Highxerces-j2Red HatApache XML Security For Java vulnerable to authentication bypass by HMAC truncation5.0 Mediumxerces-j2Red HatThe mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion...7.1 Highxerces-j2Red HatDirectory Traversal in Apache Tomcat5.0 Mediumxerces-j2Red HatOff-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big...6.4 Mediumxerces-j2Red HatExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat4.2 Mediumxerces-j2Red HatExposure of Sensitive Information in Apache Tomcat4.3 Mediumxerces-j2Red HatApache Tomcat Denial of Service via Malformed Request Headers5.0 Mediumxerces-j2Red HatThe expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7,...7.5 Highxerces-j2Red HatThe apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5...4.3 Mediumxerces-j2Red HatJBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4...5.0 Mediumxerces-j2Red HatCross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0...4.3 Mediumxerces-j2Red HatApache Tomcat Path Traversal Vulnerability5.0 Mediumxerces-j2Red HatApache Tomcat Cross-site scripting (XSS) vulnerability4.3 Mediumxerces-j2Red HatThe ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the...5.0 Mediumxerces-j2Red HatDouble free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of...5.0 Medium- Show moreLoading…