Rezultati pretraživanja za 'Proizvođač: debian'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-10673 | 6.8 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus). | 2026-08-25 16:28:27 | 2020-03-18 22:15:12 |
| CVE-2020-10672 | 6.8 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms). | 2026-08-25 16:28:27 | 2020-03-18 22:15:12 |
| CVE-2020-9548 | 6.8 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core). | 2026-08-25 16:28:27 | 2020-03-02 04:15:11 |
| CVE-2020-9546 | 6.8 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config). | 2026-08-25 16:28:27 | 2020-03-02 04:15:10 |
| CVE-2020-1938 | 7.5 | When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available t | 2026-08-25 16:28:27 | 2020-02-24 22:15:12 |
| CVE-2019-17569 | 5.8 | The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of H | 2026-08-25 16:28:27 | 2020-02-24 22:15:11 |
| CVE-2019-10086 | 7.5 | In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by defa | 2026-08-25 16:28:27 | 2019-08-20 21:15:12 |
| CVE-2018-15756 | 5.0 | Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, | 2026-08-25 16:28:27 | 2018-10-18 22:29:00 |
| CVE-2018-11039 | 4.3 | Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HTTP method (including TRACE) using the HiddenHttpMethodFilter in Spring | 2026-08-25 16:28:27 | 2018-06-25 15:29:00 |
| CVE-2017-12617 | 6.8 | When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload | 2026-08-25 16:28:27 | 2017-10-04 01:29:02 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/939
Zapisa po stranici: