Browse CVEs

MEDIUM 5.0 CVE-2011-2513 The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and bef… Icedtea Web after 1.8.8 Fix from $1,6002014-05-14 MEDIUM 5.0 CVE-2013-6447 Multiple XML External Entity (XXE) vulnerabilities in the (1) ExecutionHandler, (2) PollHandler, and (3) SubscriptionHandler classes in JBoss Seam Re… Jboss Seam 2 Framework after 2.3.1 Fix from $1,6002014-01-23 MEDIUM 5.4 CVE-2013-4112 The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (di… Jboss Enterprise Application Platform Mitigation only Fix from $1,6002013-09-28 MEDIUM 5.0 CVE-2011-5245 The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external … Resteasy after 2.3.1 Fix from $1,6002012-11-23 MEDIUM 5.0 CVE-2012-0818 RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity … Resteasy after 2.3.0 Fix from $1,6002012-11-23 MEDIUM 6.4 CVE-2009-0788 Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to (1) obtain unspecifie… Network Satellite Server No fix yet Fix from $1,6002011-04-18 MEDIUM 5.0 CVE-2010-3860 IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which… Icedtea after 1.9.1 Fix from $1,6002010-12-08 MEDIUM 5.0 CVE-2008-3274 The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, w… Enterprise Ipa after 1.1.0 Fix from $1,6002008-09-12