EUVD-2022-1875

Malicious code in bioql PyPI...

EUVD-2022-4947

Malicious code in bioql PyPI...

EUVD-2022-35006

Malicious code in bioql PyPI...

EUVD-2022-1490

Malicious code in bioql PyPI...

org.jboss.eap:wildfly-ejb3: Improper Deserialization in JBoss Marshalling Allows Remote Code Execution

A security flaw exists in WildFly and JBoss Enterprise Application Platform EAP within the Enterprise JavaBeans EJB remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted...

org.jboss.eap:wildfly-ejb3: Improper Deserialization in JBoss Marshalling Allows Remote Code Execution

A security flaw exists in WildFly and JBoss Enterprise Application Platform EAP within the Enterprise JavaBeans EJB remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted...

CVE-2025-2251

A security flaw exists in WildFly and JBoss Enterprise Application Platform EAP within the Enterprise JavaBeans EJB remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted...

PT-2025-15231

Name of the Vulnerable Software and Affected Versions WildFly affected versions not specified JBoss Enterprise Application Platform EAP affected versions not specified Description A security flaw exists within the Enterprise JavaBeans EJB remote invocation mechanism, stemming from untrusted data...

Red Hat JBoss Enterprise Application Platform and Red Hat Wildfly code-related vulnerabilities

Red Hat JBoss Enterprise Application Platform EAP and Red Hat Wildfly are both products of Red Hat, Inc.Red Hat JBoss Enterprise Application Platform is an open source, J2EE-based middleware platform. J2EE-based middleware platform. The platform is mainly used for building, deploying and hosting...

CVE-2025-2251: Deserialization of Untrusted Data

A security flaw exists in WildFly and JBoss Enterprise Application Platform EAP within the Enterprise JavaBeans EJB remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted...

EJBCA injection vulnerability

EJBCA is an open source Public Key Infrastructure PKI and Certificate Authority CA software from Keyfactor Open Source. An injection vulnerability exists in EJBCA version 8.0 that stems from a redirection attack that could result from modifying the Host header...

de.gedoplan:baselibs-wildfly (36.0.1_02), org.eclipse.jetty.documentation:code-examples (>=10.0.22, <=11.0.25) +16 more potentially affected by CVE-2024-12369 via org.wildfly.security:wildfly-elytron (>=2.3.0.final, <=2.6.0.final)

org.wildfly.security:wildfly-elytron MAVEN version =2.3.0.final, =10.0.22, =10.0.21, =10.0.21, =10.0.21, =10.0.21, =10.0.21, =26.0.0, =26.0.0, =26.0.0, =2.1.0.final, =2.1.6.final and more Source cves: CVE-2024-12369 Source advisory: MEND:CVE-2024-12369...

io.quarkus:quarkus-elytron-security-oauth2 (>=2.3.0.cr1, <=2.3.1.final), io.quarkus:quarkus-elytron-security-oauth2-deployment (>=2.3.0.cr1, <=2.3.1.final) +58 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.17.0.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.17.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - io.quarkus:quarkus-elytron-security-oauth2 =2.3.0.cr1,...

Fedora: Security Advisory for aopalliance (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: scannotation-1.0.3-0.33.r12.fc40

Scannotation is a Java library that creates an annotation database from a set of .class files.This database is really just a set of maps that in dex what annotations are used and what classes are using them. Why do you need th is? What if you are an annotation framework like an EJB 3.0 container...

BIT-WILDFLY-2020-10740

A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application BeansEJB due to lack of validation/filtering capabilities in wildfly...

org.infinispan:infinispan-adaptor52x (6.0.1.final), org.infinispan:infinispan-as-modules (6.0.1.final) +4 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (6.0.1.final)

org.infinispan:infinispan-cachestore-jdbc MAVEN version 6.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc and may be impacted: - org.infinispan:infinispan-adaptor52x 6.0.1.final -...

org.infinispan:infinispan-as-modules (6.0.1.final), org.wildfly:wildfly-clustering-ejb-infinispan (>=8.0.0.cr1, <=8.0.0.final) +3 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-remote (6.0.1.final)

org.infinispan:infinispan-cachestore-remote MAVEN version 6.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-remote and may be impacted: - org.infinispan:infinispan-as-modules 6.0.1.final -...

Red Hat WildFly < 20.0.0 Multiple Vulnerabilities

Red Hat WildFly is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redhat:wildfly";...

org.apache.maven.plugins:maven-assembly-plugin (2.5.5), org.apache.maven.plugins:maven-ejb-plugin (2.5.1) potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (2.10.2)

org.codehaus.plexus:plexus-archiver MAVEN version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - org.apache.maven.plugins:maven-assembly-plugin 2.5.5 -...