| Uncontrolled Memory Allocation | |
| Signed to Unsigned Conversion Error | |
| Integer Overflow or Wraparound | |
| Improper Handling of Length Parameter Inconsistency | |
| Improper Validation of Specified Quantity in Input | |
| CVE-2024-21131 | |
| Out-of-bounds Write | |
| Resource Exhaustion | |
| Uncontrolled Memory Allocation | |
| Improper Input Validation | |
| Covert Timing Channel | |
| Information Exposure Through Log Files | |
| Improper Input Validation | |
| Out-of-bounds Write | |
| Race Condition | |
| Improper Certificate Validation | |
| Deserialization of Untrusted Data | |
| Deserialization of Untrusted Data | |
| Directory Traversal | |
| Information Exposure | |
| Improper Input Validation | |
| Improperly Implemented Security Check for Standard | |
| Improper Input Validation | |
| Improper Neutralization of Null Byte or NUL Character | |
| Improper Neutralization of Null Byte or NUL Character | |
| Improper Enforcement of Message Integrity During Transmission in a Communication Channel | |
| Reliance on File Name or Extension of Externally-Supplied File | |
| Deserialization of Untrusted Data | |
| Allocation of Resources Without Limits or Throttling | |
| Resource Exhaustion | |
| Use of Insufficiently Random Values | |
| Integer Coercion Error | |
| Missing Report of Error Condition | |
| Improper Use of Validation Framework | |
| Integer Underflow | |
| Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Deserialization of Untrusted Data | |
| Allocation of Resources Without Limits or Throttling | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Allocation of Resources Without Limits or Throttling | |
| Deserialization of Untrusted Data | |
| Deserialization of Untrusted Data | |
| Incorrect Permission Assignment for Critical Resource | |
| CVE-2021-35560 | |
| Information Exposure | |
| NULL Pointer Dereference | |
| Allocation of Resources Without Limits or Throttling | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Improper Input Validation | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Divide By Zero | |
| Untrusted Search Path | |
| Information Exposure | |
| Improper Access Control | |
| Improper Certificate Validation | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Improper Verification of Cryptographic Signature | |
| Improper Access Control | |
| CVE-2018-2973 | |
| Directory Traversal | |
| Improper Authentication | |
| Information Exposure | |
| CVE-2018-2940 | |
| Improper Input Validation | |
| Information Exposure | |
| Improper Verification of Cryptographic Signature | |
| Allocation of Resources Without Limits or Throttling | |
| CVE-2018-2783 | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Deserialization of Untrusted Data | |
| CVE-2018-2800 | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Verification of Cryptographic Signature | |
| Allocation of Resources Without Limits or Throttling | |
| Incorrect Calculation | |
| CVE-2018-2638 | |
| CVE-2018-2639 | |
| Incorrect Permission Assignment for Critical Resource | |
| Allocation of Resources Without Limits or Throttling | |
| Unsynchronized Access to Shared Data in a Multithreaded Context | |
| Untrusted Search Path | |
| Deserialization of Untrusted Data | |
| CVE-2018-2582 | |
| Improper Access Control | |
| Improper Input Validation | |
| Allocation of Resources Without Limits or Throttling | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Use of Insufficiently Random Values | |
| Improper Input Validation | |
| LDAP Injection | |
| Use After Free | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| CVE-2017-10309 | |
| CVE-2017-10355 | |
| Insufficient Verification of Data Authenticity | |
| Allocation of Resources Without Limits or Throttling | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| CVE-2017-10346 | |
| CVE-2017-10285 | |
| HTTP Response Splitting | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| CVE-2017-10105 | |
| Inclusion of Functionality from Untrusted Control Sphere | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Out-of-Bounds | |
| CVE-2017-10096 | |
| CVE-2017-10090 | |
| CVE-2017-10067 | |
| Allocation of Resources Without Limits or Throttling | |
| CVE-2017-10110 | |
| CVE-2017-10101 | |
| CVE-2017-10102 | |
| CVE-2017-10107 | |
| CVE-2017-10078 | |
| CVE-2017-10116 | |
| Allocation of Resources Without Limits or Throttling | |
| CVE-2017-10243 | |
| Allocation of Resources Without Limits or Throttling | |
| CVE-2017-10087 | |
| CVE-2017-10089 | |
| Covert Timing Channel | |
| Numeric Errors | <1:1.8.0.4.5-1jpp.1.el7_3 |
| Numeric Errors | <1:1.8.0.4.5-1jpp.1.el7_3 |
| Out-of-bounds Read | <1:1.8.0.4.5-1jpp.1.el7_3 |
| Numeric Errors | <1:1.8.0.4.5-1jpp.1.el7_3 |
| XML External Entity (XXE) Injection | <1:1.8.0.4.5-1jpp.1.el7_3 |
| Improper Input Validation | <1:1.8.0.4.5-1jpp.1.el7_3 |
| Use of a Broken or Risky Cryptographic Algorithm | <1:1.8.0.4.5-1jpp.1.el7_3 |
| Improper Input Validation | <1:1.8.0.4.5-1jpp.1.el7_3 |
| Improper Authentication | <1:1.8.0.4.5-1jpp.1.el7_3 |
| Untrusted Search Path | <1:1.8.0.4.5-1jpp.1.el7_3 |
| CVE-2017-3259 | |
| Covert Timing Channel | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Allocation of Resources Without Limits or Throttling | |
| CVE-2017-3272 | |
| Information Exposure | |
| Integer Overflow or Wraparound | |
| CVE-2017-3289 | |
| Deserialization of Untrusted Data | |
| Improper Input Validation | |
| Improper Input Validation | |
| Allocation of Resources Without Limits or Throttling | |
| Covert Timing Channel | |
| Improper Input Validation | |
| CVE-2016-5554 | <1:1.8.0.3.20-1jpp.1.el7_2 |
| Improper Access Control | <1:1.8.0.3.20-1jpp.1.el7_2 |
| Use of a Broken or Risky Cryptographic Algorithm | <1:1.8.0.3.20-1jpp.1.el7_2 |
| Cleartext Transmission of Sensitive Information | <1:1.8.0.3.20-1jpp.1.el7_2 |
| Improper Input Validation | <1:1.8.0.3.20-1jpp.1.el7_2 |
| Out-of-bounds Read | |
| CVE-2016-3511 | <1:1.8.0.3.10-1jpp.2.el7_2 |
| CVE-2016-3598 | <1:1.8.0.3.10-1jpp.2.el7_2 |
| CVE-2016-3422 | |
| Buffer Overflow | |
| CVE-2016-3443 | |
| Improper Input Validation | |
| CVE-2016-3449 | |
| CVE-2016-0376 | |
| CVE-2016-3426 | |
| CVE-2016-3427 | |
| CVE-2016-0687 | |
| CVE-2016-0686 | |
| CVE-2016-0705 | |
| Improper Certificate Validation | |
| Cleartext Transmission of Sensitive Information | |
| Information Exposure | |
| CVE-2020-14796 | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Input Validation | |
| Improper Data Handling | |
| Time-of-check Time-of-use (TOCTOU) | |
| Incorrect Conversion between Numeric Types | |
| CVE-2016-0402 | |
| CVE-2016-0466 | |
| CVE-2016-0475 | |
| Out-of-bounds Write | |
| Information Exposure Through Log Files | |
| Buffer Overflow | |
| Buffer Overflow | |
| CVE-2015-4902 | |
| CVE-2015-4810 | |
| CVE-2015-4871 | |
| Information Exposure | |
| Information Exposure | |
| Out-of-bounds Read | |
| CVE-2015-4844 | |
| CVE-2015-4883 | |
| Information Exposure | |
| CVE-2015-4882 | |
| Algorithmic Complexity | |
| Information Exposure | |
| Out-of-bounds Write | |
| CVE-2015-4835 | |
| Allocation of Resources Without Limits or Throttling | |
| CVE-2015-4860 | |
| Improper Initialization | |
| CVE-2015-4903 | |
| Improper Input Validation | |
| CVE-2015-4872 | |
| Uncaught Exception | |
| Uncaught Exception | |
| Out-of-Bounds | |
| Improper Input Validation | |
| CVE-2020-14577 | |
| Out-of-Bounds | |
| CVE-2020-14556 | |
| Incorrect Privilege Assignment | |
| Out-of-Bounds | |
| Uncaught Exception | |
| Improper Input Validation | |
| CVE-2020-2781 | |
| Uncaught Exception | |
| Uncaught Exception | |
| Uncaught Exception | |
| HTTP Response Splitting | |
| Uncaught Exception | |
| Inefficient Regular Expression Complexity | |
| Allocation of Resources Without Limits or Throttling | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Encoding Error | |
| Allocation of Resources Without Limits or Throttling | |
| Modification of Assumed-Immutable Data (MAID) | |
| Improper Input Validation | |
| Allocation of Resources Without Limits or Throttling | |
| CVE-2019-2996 | |
| Improper Authorization | |
| Allocation of Resources Without Limits or Throttling | |
| Cross-site Scripting (XSS) | |
| Uncaught Exception | |
| CVE-2019-2945 | |
| Uncaught Exception | |
| Uncaught Exception | |
| Integer Overflow or Wraparound | |
| Uncaught Exception | |
| Uncaught Exception | |
| CVE-2019-2978 | |
| Cross-site Scripting (XSS) | |
| Insufficiently Protected Credentials | |
| NULL Pointer Dereference | |
| Out-of-Bounds | |
| Out-of-Bounds | |
| CVE-2019-2762 | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Input Validation | |
| CVE-2019-2786 | |
| Resource Exhaustion | |
| Buffer Overflow | |
| Out-of-bounds Read | |
| Information Exposure | |
| CVE-2019-2449 | |
| CVE-2019-2697 | |
| Improper Input Validation | |
| Divide By Zero | |
| Out-of-bounds Write | |
| CVE-2019-2684 | |
| Allocation of Resources Without Limits or Throttling | |