Redhat Jboss Core Services vulnerabilities

• xmlsoft libxml2, ibm aix, vios +10 more +12 more Libxml2: libxml2: denial of service via crafted xsd-validated document CVE-2026-6732 Fix available 6.5 MediumApril 23, 2026
• xmlsoft libxml2, ibm aix, vios +11 more +13 more Libxml2: libxml2: denial of service via crafted xml catalogs CVE-2026-0992 Fix available 2.9 LowJanuary 15, 2026
• xmlsoft libxml2, ibm aix, vios +11 more +13 more Libxml2: unbounded relaxng include recursion leading to stack overflow CVE-2026-0989 Fix available 3.7 LowJanuary 15, 2026
• xmlsoft libxml2, ibm aix, vios +11 more +13 more Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing CVE-2026-0990 Fix available 5.9 MediumJanuary 15, 2026
• xmlsoft libxml2, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +34 more +36 more Libxml2: stack buffer overflow in xmllint interactive shell command handling CVE-2025-6170 Fix available 2.5 LowJune 16, 2025
• xmlsoft libxml2, red hat discovery 2, enterprise linux 10 +46 more +48 more Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 CVE-2025-6021 Fix available 7.5 HighJune 12, 2025
• eclipse jetty, ietf http, http/2 +166 more +168 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• redhat jboss core services httpd A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not... CVE-2021-3688 4.8 MediumAugust 26, 2022
• apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 more mod_proxy SSRF CVE-2021-40438 In KEVPublic exploitFix available EPSS 100.0% 9.0 CriticalSeptember 16, 2021
• gnome libxml2, netapp active iq unified manager, cloud backup +19 more +21 more A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all... CVE-2021-3541 Fix available 6.5 MediumMay 18, 2021
• gnome libxml2, debian linux, fedoraproject fedora +19 more +21 more Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing CVE-2021-3537 Fix available 5.9 MediumMay 10, 2021
• gnome libxml2, debian linux, fedoraproject fedora +18 more +20 more Nokogiri Implements libxml2 version vulnerable to use-after-free CVE-2021-3518 Fix available EPSS 21.9% 8.8 HighMay 5, 2021
• gnome libxml2, debian linux, fedoraproject fedora +28 more +30 more Nokogiri contains libxml Out-of-bounds Write vulnerability CVE-2021-3517 Fix available EPSS 17.0% 8.6 HighMay 5, 2021
• gnome libxml2, xmlsoft xmllint, debian linux +10 more +12 more There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit... CVE-2021-3516 Fix available 7.8 HighMay 5, 2021
• redhat jboss core services httpd A flaw was found in JBCS httpd in version 2.4.37 SP3, where it uses a back-end worker SSL... CVE-2020-25680 5.4 MediumJanuary 7, 2021
• openldap, debian linux, fedoraproject fedora +7 more +9 more A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a... CVE-2020-25710 Fix available 7.5 HighNovember 13, 2020
• openldap, apple mac os x, macos +5 more +7 more A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be... CVE-2020-25709 Fix available 7.5 HighNovember 13, 2020
• apache traffic server, apple swiftnio, canonical ubuntu linux +15 more +17 more Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service CVE-2019-9518 Fix available EPSS 25.4% 7.5 HighAugust 13, 2019
• apache http server, traffic server, apple swiftnio +20 more +22 more Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service CVE-2019-9517 Fix available EPSS 27.0% 7.5 HighAugust 13, 2019
• apache traffic server, apple swiftnio, canonical ubuntu linux +16 more +18 more Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service CVE-2019-9516 Fix available EPSS 57.5% 7.5 HighAugust 13, 2019
• apache traffic server, apple swiftnio, canonical ubuntu linux +19 more +21 more Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service CVE-2019-9515 Fix available EPSS 87.3% 7.5 HighAugust 13, 2019
• apache traffic server, apple swiftnio, canonical ubuntu linux +25 more +27 more Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service CVE-2019-9514 Fix available EPSS 82.8% 7.5 HighAugust 13, 2019
• apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 more Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service CVE-2019-9513 Public exploitFix available EPSS 81.6% 7.5 HighAugust 13, 2019
• apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 more Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service CVE-2019-9511 Public exploitFix available EPSS 59.5% 7.5 HighAugust 13, 2019
• apache http server, canonical ubuntu linux, fedoraproject fedora +7 more +9 more A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a... CVE-2019-0197 Fix available 4.2 MediumApril 4, 2019
• apache http server, canonical ubuntu linux, debian linux +23 more +25 more In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code... CVE-2019-0211 In KEVPublic exploitFix available EPSS 65.0% 7.8 HighApril 2, 2019
• apache http server, canonical ubuntu linux, debian linux +9 more +11 more In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to... CVE-2018-17189 Fix available EPSS 19.4% 5.3 MediumJanuary 30, 2019
• apache tomcat jk connector, apache software foundation tomcat connectors, debian linux +1 more +3 more The Apache Web Server (httpd) specific code that normalised the requested path before matching it... CVE-2018-11759 Public exploitFix available EPSS 90.6% 7.5 HighOctober 31, 2018
• redhat jboss core services, xmlsoft libxml2 +1 more libxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a... CVE-2016-9598 6.5 MediumAugust 16, 2018
• redhat jboss core services, xmlsoft libxml2 +1 more libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context... CVE-2016-9596 6.5 MediumAugust 16, 2018
• apache http server, canonical ubuntu linux, netapp cloud backup +2 more +4 more DoS for HTTP/2 connections by crafted requests CVE-2018-1333 Fix available EPSS 17.0% 7.5 HighJune 18, 2018
• apache http server, canonical ubuntu linux, debian linux +10 more +12 more In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the... CVE-2018-1312 Fix available EPSS 15.8% 9.8 CriticalMarch 26, 2018
• apache portable runtime, debian linux, redhat enterprise linux desktop +8 more +10 more When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field... CVE-2017-12613 Fix available 7.1 HighOctober 24, 2017
• apache http server, apple mac os x, debian linux +12 more +14 more In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-... CVE-2017-9788 Fix available EPSS 56.8% 9.1 CriticalJuly 13, 2017
• apache http server, apple mac os x, debian linux +11 more +13 more In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by... CVE-2017-3167 Fix available EPSS 20.2% 9.8 CriticalJune 19, 2017
• apache http server, debian linux, netapp clustered data ontap +8 more +10 more Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace... CVE-2016-8743 Fix available EPSS 13.3% 7.5 HighDecember 22, 2016
• apache http server, canonical ubuntu linux, debian linux +16 more +18 more The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not... CVE-2016-5387 Fix available EPSS 55.7% 8.1 HighJuly 18, 2016
• xmlsoft libxml2, canonical ubuntu linux, debian linux +11 more +13 more The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery... CVE-2016-3627 Public exploitFix available 7.5 HighMay 3, 2016