347 matches found
strutt-cve-2014-0114
CVE-2014-0114 - Vulnerabilidad en Struts 1 Los parámetros en una solicitud POST o GET se manejan como propiedades que se establecen con el formulario como punto de partida. Los parámetros pueden ser una ruta a un objeto anidado. Apache Struts 1.x puede ser manipulado para invocar getClass en Form...
CVE-2025-48734
CVE-2025-48734: Apache Commons BeanUtils – Fuga de información de enum declaringClass y cadena de RCE Solo con fines educativos y de investigación de seguridad autorizada. Este repositorio proporciona un entorno de laboratorio controlado para reproducir la vulnerabilidad CVE-2025-48734 en Apache...
ROOT-APP-MAVEN-CVE-2019-10086 CVE-2019-10086 in commons-beanutils:commons-beanutils - Patched by Root
Root has patched CVE-2019-10086 in the commons-beanutils:commons-beanutils package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2014-0114 CVE-2014-0114 in commons-beanutils:commons-beanutils - Patched by Root
Root has patched CVE-2014-0114 in the commons-beanutils:commons-beanutils package for Root:Maven. Multiple fixed versions available...
Astra Linux – Vulnerability in Commons-BeanUtils
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added, which enables suppressing the ability for an attacker to access the classloader through the class property available on all Java objects. However, we did not use this feature by default, as it is a characteristic of...
Astra Linux – Vulnerability in Commons-BeanUtils
Apache Commons has a vulnerability related to improper access control. A special BeanIntrospector class was added in version 1.9.2. This can be used to prevent attackers from using the declared class property of Java enum objects to gain access to the classloader. However, this protection was not...
CLSA-2026-1788757915 TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 1 CVE. Fixed in 1.10.0-tuxcare.1...
CLSA-2026-1788757862 TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 1 CVE. Fixed in 1.9.2-tuxcare.1...
GHSA-H84G-69H7-MW6V mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"
Impact Prior to version 0.6.0, mchange-commons-java includes a JNDI ObjectFactory implementation com.mchange.v2.naming.JavaBeanObjectFactory willing to construct objects of arbitrary classes and initialize "JavaBean"-style properties. There are classes for which this kind of initialization is...
CLSA-2026-1784077478 TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 1 CVE. Fixed in 1.10.1-tuxcare.1...
CLSA-2026-1782435541 TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 1 CVE. Fixed in 1.8.0-tuxcare.2...
CLSA-2026-1780361388 TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 1 CVE. Fixed in 1.8.3-tuxcare.2...
CLSA-2026-1779756520 TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 1 CVE. Fixed in 1.8.0-tuxcare.1...
CLSA-2026-1777336746 TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 1 CVE. Fixed in 1.6-tuxcare.2...
CLSA-2026-1776991051 TuxCare security update for commons-beanutils:commons-beanutils (2 CVEs)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 2 CVEs. Fixed in 1.8.3-tuxcare.1...
CLSA-2026-1775781177 TuxCare security update for commons-beanutils:commons-beanutils (2 CVEs)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 2 CVEs. Fixed in 1.6-tuxcare.1...
CLSA-2025-1754006614 TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 1 CVE. Fixed in 1.9.4-tuxcare.1...
javapackages-tools:201801 security update
ant-contrib 1.0-0.32.b3 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild 1.0-0.31.b3 - Rebuilt for https://fedoraproject.org/wiki/Fedora27MassRebuild 1.0-0.30.b3 - Rebuilt for https://fedoraproject.org/wiki/Fedora26MassRebuild 1.0-0.29.b3 - Rebuilt for...
EUVD-2026-40847
c3p0 can, in combination with other libraries, compose to a "sink" for deserialization gadgets...
USN-8322-2 commons-beanutils regression
USN-8322-1 fixed a vulnerability in Apache Commons BeanUtils. It was discovered that for Ubuntu 18.04 LTS, during the update preparation phase, a previous fix for CVE-2014-0114 and CVE-2019-10086 was incorrectly dropped. This update reintroduces the fix for CVE-2014-0114 and CVE-2019-10086. We...