jbosseapxp kayıtları
jbosseapxp üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %83,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-400 Uncontrolled Resource Consumption3
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm2
- CWE-385 Covert Timing Channel1
- CWE-502 Deserialization of Untrusted Data1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2025-70974İstismar yok | Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Javaalibaba · fastjson · CWE-829 | Kritik10,0 | — | %0,7 | 9 Oca 2026 |
37İzleyin | CVE-2025-14813İstismar yok | GOSTCTR implementation unable to process more than 255 blocks correctlylegion of the bouncy castle inc. · bc-java · CWE-327 | Kritik9,3 | — | %0,3 | 15 Nis 2026 |
35İzleyin | CVE-2026-5598İstismar yok | Non-constant time comparisons risk private key leakage in FrodoKEM.legion of the bouncy castle inc. · bc-java · CWE-385 | Yüksek8,9 | — | %0,8 | 15 Nis 2026 |
35İzleyin | CVE-2026-27830İstismar yok | c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString propertyswaldman · c3p0 · CWE-94 | Yüksek8,9 | — | %0,5 | 25 Şub 2026 |
34İzleyin | CVE-2026-3505İstismar yok | Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.legion of the bouncy castle inc. · bc-java · CWE-400 | Yüksek8,7 | — | %0,7 | 15 Nis 2026 |
34İzleyin | CVE-2026-0532İstismar yok | External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connectorelastic · kibana · CWE-918 | Yüksek8,6 | — | %0,4 | 14 Oca 2026 |
33İzleyin | CVE-2026-0603Kavram kanıtı | Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injectionred hat · red hat jboss enterprise application platform 7.1 eus for rhel 7 · CWE-89 | Yüksek8,3 | — | %1,0 | 23 Oca 2026 |
30İzleyin | CVE-2026-40984İstismar yok | Micrometer HTTP server instrumentations DoS vulnerabilityspring · micrometer · CWE-400 | Yüksek7,5 | — | %0,7 | 9 Haz 2026 |
30İzleyin | CVE-2026-6857Kavram kanıtı | Camel-infinispan: camel-infinispan: remote code execution via unsafe deserializationred hat · red hat build of apache camel 4.18.1 for spring boot 3.5.14 · CWE-502 | Yüksek7,5 | — | %0,6 | 22 Nis 2026 |
30İzleyin | CVE-2026-40983İstismar yok | Micrometer gRPC server instrumentation DoS vulnerabilityspring · micrometer · CWE-400 | Yüksek7,5 | — | %0,6 | 9 Haz 2026 |
30İzleyin | CVE-2024-52011Kavram kanıtı | launch-editor vulnerable to command injection via the crafted request on Windowsvitejs · launch-editor · CWE-77 | Yüksek7,5 | — | %0,5 | 1 Haz 2026 |
30İzleyin | CVE-2024-4027İstismar yok | Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacksred hat · red hat build of apicurio registry 2 · CWE-20 | Yüksek7,5 | — | %0,4 | 30 Oca 2026 |
30İzleyin | CVE-2026-11998İstismar yok | AngularJS XSS via SCE resource URL sanitization bypassgoogle · angularjs · CWE-791 | Yüksek7,6 | — | %0,3 | 24 Haz 2026 |
29İzleyin | CVE-2026-57915İstismar yok | Apache Kerby: Kerberos Pre-Authentication Bypassapache software foundation · apache kerby · CWE-304 | Yüksek7,3 | — | %0,5 | 26 Haz 2026 |
28İzleyin | CVE-2026-0775İstismar yok | npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerabilitynpm · cli · CWE-732 | Yüksek7,0 | — | %0,2 | 23 Oca 2026 |
25İzleyin | CVE-2026-5588İstismar yok | PKIX draft CompositeVerifier accepts empty signature sequence as valid.legion of the bouncy castle inc. · bc-java · CWE-327 | Orta6,3 | — | %0,7 | 15 Nis 2026 |
22İzleyin | CVE-2026-0636İstismar yok | LDAP Injection Vulnerability in LDAPStoreHelper.javalegion of the bouncy castle inc. · bc-java · CWE-90 | Orta5,5 | — | %0,5 | 15 Nis 2026 |
21İzleyin | CVE-2026-45292İstismar yok | opentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagationopen-telemetry · opentelemetry-java · CWE-770 | Orta5,3 | — | %1,0 | 28 May 2026 |
- CVE-2025-7097440Planlayın
Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java
KritikCVSS 10,0İstismar yokEPSS %0alibaba · fastjson9 Oca 2026
- CVE-2025-1481337İzleyin
GOSTCTR implementation unable to process more than 255 blocks correctly
KritikCVSS 9,3İstismar yokEPSS %0legion of the bouncy castle inc. · bc-java15 Nis 2026
- CVE-2026-559835İzleyin
Non-constant time comparisons risk private key leakage in FrodoKEM.
YüksekCVSS 8,9İstismar yokEPSS %0legion of the bouncy castle inc. · bc-java15 Nis 2026
- CVE-2026-2783035İzleyin
c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property
YüksekCVSS 8,9İstismar yokEPSS %0swaldman · c3p025 Şub 2026
- CVE-2026-350534İzleyin
Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.
YüksekCVSS 8,7İstismar yokEPSS %0legion of the bouncy castle inc. · bc-java15 Nis 2026
- CVE-2026-053234İzleyin
External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector
YüksekCVSS 8,6İstismar yokEPSS %0elastic · kibana14 Oca 2026
- CVE-2026-060333İzleyin
Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection
YüksekCVSS 8,3Kavram kanıtıEPSS %1red hat · red hat jboss enterprise application platform 7.1 eus for rhel 723 Oca 2026
- CVE-2026-4098430İzleyin
Micrometer HTTP server instrumentations DoS vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0spring · micrometer9 Haz 2026
- CVE-2026-685730İzleyin
Camel-infinispan: camel-infinispan: remote code execution via unsafe deserialization
YüksekCVSS 7,5Kavram kanıtıEPSS %0red hat · red hat build of apache camel 4.18.1 for spring boot 3.5.1422 Nis 2026
- CVE-2026-4098330İzleyin
Micrometer gRPC server instrumentation DoS vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0spring · micrometer9 Haz 2026
- CVE-2024-5201130İzleyin
launch-editor vulnerable to command injection via the crafted request on Windows
YüksekCVSS 7,5Kavram kanıtıEPSS %0vitejs · launch-editor1 Haz 2026
- CVE-2024-402730İzleyin
Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks
YüksekCVSS 7,5İstismar yokEPSS %0red hat · red hat build of apicurio registry 230 Oca 2026
- CVE-2026-1199830İzleyin
AngularJS XSS via SCE resource URL sanitization bypass
YüksekCVSS 7,6İstismar yokEPSS %0google · angularjs24 Haz 2026
- CVE-2026-5791529İzleyin
Apache Kerby: Kerberos Pre-Authentication Bypass
YüksekCVSS 7,3İstismar yokEPSS %0apache software foundation · apache kerby26 Haz 2026
- CVE-2026-077528İzleyin
npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability
YüksekCVSS 7,0İstismar yokEPSS %0npm · cli23 Oca 2026
- CVE-2026-558825İzleyin
PKIX draft CompositeVerifier accepts empty signature sequence as valid.
OrtaCVSS 6,3İstismar yokEPSS %0legion of the bouncy castle inc. · bc-java15 Nis 2026
- CVE-2026-063622İzleyin
LDAP Injection Vulnerability in LDAPStoreHelper.java
OrtaCVSS 5,5İstismar yokEPSS %0legion of the bouncy castle inc. · bc-java15 Nis 2026
- CVE-2026-4529221İzleyin
opentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagation
OrtaCVSS 5,3İstismar yokEPSS %1open-telemetry · opentelemetry-java28 May 2026