EUVD-2009-1197

Malware in sbrugna...

EUVD-2009-4236

Malware in sbrugna...

EUVD-2018-0497

Malware in sbrugna...

EUVD-2021-1660

Malware in sbrugna...

EUVD-2018-0651

Malware in sbrugna...

EUVD-2009-1196

Malware in sbrugna...

CVE-2021-37578

Apache jUDDI uses several classes related to Java's Remote Method Invocation RMI which as an extension to UDDI provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicio...

org.apache.juddi:juddi-tomcat (3.3.6), org.apache.juddi:uddi-tck (3.3.6) +8 more potentially affected by CVE-2022-25762 via org.apache.tomcat:tomcat (>=9.0.10, <=9.0.12)

org.apache.tomcat:tomcat MAVEN version =9.0.10, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m2 Source cves: CVE-2022-25762 Source advisory: OSV:GHSA-H3CH-5PP2-VH6W...

Apache jUDDI Code Execution

The vulnerability of the Apache jUDDI software lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

org.apache.juddi:juddi-tomcat (3.3.5), org.apache.juddi:uddi-tck (3.3.5) potentially affected by CVE-2021-30639 via org.apache.tomcat:tomcat (7.0.82)

org.apache.tomcat:tomcat MAVEN version 7.0.82 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.apache.juddi:juddi-tomcat 3.3.5 - org.apache.juddi:uddi-tck 3.3.5 Source cves: CVE-2021-30639 Source...

GHSA-9HX8-2MRV-R674 Deserialization of Untrusted Data in Apache jUDDI

Apache jUDDI uses several classes related to Java's Remote Method Invocation RMI which as an extension to UDDI provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicio...

Deserialization of Untrusted Data in Apache jUDDI

Apache jUDDI uses several classes related to Java's Remote Method Invocation RMI which as an extension to UDDI provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicio...

CVE-2021-37578

Apache jUDDI uses several classes related to Java's Remote Method Invocation RMI which as an extension to UDDI provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicio...

CVE-2021-37578

Apache jUDDI uses several classes related to Java's Remote Method Invocation RMI which as an extension to UDDI provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicio...

Design/Logic Flaw

Apache jUDDI uses several classes related to Java's Remote Method Invocation RMI which as an extension to UDDI provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicio...

CVE-2021-37578

Apache jUDDI uses several classes related to Java's Remote Method Invocation RMI which as an extension to UDDI provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicio...

CVE-2021-37578

Apache jUDDI prior to 3.3.10 exposed a deserialization-based remote code execution vector via RMI. The issue arises from Java serialization in RMI entries, potentially allowing remote code execution if exploited. RMI is disabled by default for jUDDI web services/clients, and starting with 3.3.10 ...

Apache jUDDI 代码问题漏洞

Apache jUDDI is a java implementation of UDDI open source package that serves WebServices. jUDDI versions prior to Apache jUDDI 3.3.10 have a code issue vulnerability that can be exploited by attackers to remotely run arbitrary code...

CVE-2021-37578: Deserialization of Untrusted Data

Apache jUDDI uses several classes related to Java's Remote Method Invocation RMI which as an extension to UDDI provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicio...

PT-2021-4021

Name of the Vulnerable Software and Affected Versions Apache jUDDI versions prior to 3.3.10 Description The issue is related to the use of Java's Remote Method Invocation RMI in Apache jUDDI, which provides an alternate transport for accessing UDDI services. RMI uses the default Java serializatio...