Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

jboss web framework kit vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2014-0149
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0 allow remote malicious users to inject arbitrary web script or HTML via a (1) parameter or (2) id name.
Redhat Jboss Web Framework Kit 2.5.0
NA
CVE-2014-0086
The doFilter function in webapp/PushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5, and 5.x allows remote malicious users to cause a denial of service (memory consumption and out-of-memory error) via a large number of malformed atmosphere push requests.
Redhat Richfaces 5.0.0Redhat Jboss Web Framework Kit 2.5.0Redhat Richfaces 4.3.5Redhat Richfaces 4.3.4
NA
CVE-2013-6448
The InterfaceGenerator handler in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and previous versions, as used in JBoss Web Framework Kit, allows remote malicious users to bypass the WebRemote annotation restriction and obtain information about arbitrary classes and methods...
Redhat Jboss Seam 2 Framework 2.3.1Redhat Jboss Seam 2 FrameworkRedhat Jboss Seam 2 Framework 2.3.0Redhat Jboss Seam 2 Framework 2.0.2Redhat Jboss Seam 2 Framework 2.0.3Redhat Jboss Seam 2 Framework 2.1.0Redhat Jboss Seam 2 Framework 2.2.1Redhat Jboss Seam 2 Framework 2.0.0Redhat Jboss Seam 2 Framework 2.1.1Redhat Jboss Seam 2 Framework 2.1.2Redhat Jboss Seam 2 Framework 2.0.1Redhat Jboss Seam 2 Framework 2.2.0Redhat Jboss Seam 2 Framework 2.2.2
NA
CVE-2013-6447
Multiple XML External Entity (XXE) vulnerabilities in the (1) ExecutionHandler, (2) PollHandler, and (3) SubscriptionHandler classes in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and previous versions, as used in JBoss Web Framework Kit, allow remote malicious users to r...
Redhat Jboss Seam 2 Framework 2.3.0Redhat Jboss Seam 2 Framework 2.0.0Redhat Jboss Seam 2 Framework 2.1.0Redhat Jboss Seam 2 Framework 2.1.1Redhat Jboss Seam 2 Framework 2.3.1Redhat Jboss Seam 2 Framework 2.0.1Redhat Jboss Seam 2 Framework 2.0.2Redhat Jboss Seam 2 Framework 2.2.0Redhat Jboss Seam 2 Framework 2.2.1Redhat Jboss Seam 2 FrameworkRedhat Jboss Seam 2 Framework 2.0.3Redhat Jboss Seam 2 Framework 2.1.2Redhat Jboss Seam 2 Framework 2.2.2
8.6
CVSSv3
CVE-2021-3517
There is a flaw in the xml entity encoding functionality of libxml2 in versions prior to 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most like...
Xmlsoft Libxml2Redhat Jboss Core Services -Redhat Enterprise Linux 8.0Fedoraproject Fedora 33Fedoraproject Fedora 34Debian Debian Linux 9.0Netapp Snapmanager -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp E-series Santricity Storage Manager -Netapp Clustered Data Ontap Antivirus Connector -Netapp Snapdrive -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp Santricity Unified Manager -Netapp Manageability Software Development Kit -Netapp E-series Santricity Web Services -Netapp E-series Santricity Os ControllerNetapp Hci H410c Firmware -
NA
CVE-2015-0209
Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL prior to 0.9.8zf, 1.0.0 prior to 1.0.0r, 1.0.1 prior to 1.0.1m, and 1.0.2 prior to 1.0.2a might allow remote malicious users to cause a denial of service (memory corruption and applica...
Openssl Openssl 1.0.1jOpenssl Openssl 1.0.0nOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.1hOpenssl Openssl 1.0.0mOpenssl Openssl 1.0.1cOpenssl Openssl 1.0.1gOpenssl Openssl 1.0.0hOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0fOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0jOpenssl Openssl 1.0.0pOpenssl Openssl 1.0.1aOpenssl Openssl 1.0.0oOpenssl Openssl 1.0.1dOpenssl Openssl 1.0.0kOpenssl Openssl 1.0.1kOpenssl Openssl 1.0.0Openssl Openssl 1.0.1bOpenssl Openssl 1.0.1e
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook