Most recent entries from all

bdu:2020-00232

certfr-2020-avi-045 — De multiples vulnérabilités ont été découvertes dans Oracle Weblogic. Certaines d'entre elles permettent à un attaquant…

certfr-2020-avi-045

cnvd-2020-08167

EUVD-2026-37626

fkie_cve-2020-6950

Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.

GHSA-rpq8-mmwh-q9hm — Directory traversal in Eclipse Mojarra

Affected: Maven: org.glassfish:mojarra-parent

Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.

gsd-2020-6950

OESA-2021-1229 — mojarra security update

Affected: openEuler:20.03-LTS-SP1: mojarra

JvaServer(TM) Faces technology simplifies building user interfaces for JavaServer applications. Developers of various skill levels can quickly build web applications by: assembling reusable UI components in a page; connecting these components to an application data source; and wiring client-generated events to server-side event handlers. Security Fix(es): Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.(CVE-2020-6950)

RHSA-2020:2113 — Red Hat Security Advisory: Red Hat Single Sign-On 7.3.8 security update

mojarra: Path traversal in ResourceManager.java:getLocalePrefix() via the loc parameter infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371

WID-SEC-W-2022-2050 — Red Hat JBoss Application Server (JBoss): Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat JBoss Application Server (JBoss) ausnutzen, um Informationen offenzulegen, Daten zu manipulieren oder einen Cross-Site Scripting Angriff durchzuführen.