BO
Product
Build OF Quarkus
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 10Low 0
Watch
Add Build OF Quarkus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-4116 | 9.8 | Nov 22 | A vulnerability was found in quarkus Affected: All versions, or not specified |
| CVE-2023-6394 | 9.1 | Dec 9 | Quarkus: graphql operations over websockets bypass Affected: All versions, or not specified |
| CVE-2023-4853 | 8.1 | Sep 20 | A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of… Affected: 2.13.0 before 2.13.8 |
| CVE-2023-2974 | 8.1 | Jul 4 | A vulnerability was found in quarkus-core Affected: before 2.13.8 |
| CVE-2022-1011 | 7.8 | Mar 18 | A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write() Affected: 2.0 |
| CVE-2023-1108 | 7.5 | Sep 14 | A flaw was found in undertow Affected: All versions, or not specified |
| CVE-2022-4492 | 7.5 | Feb 23 | The undertow client is not checking the server identity presented by the server certificate in https connections Affected: All versions, or not specified |
| CVE-2022-1259 | 7.5 | Aug 31 | A flaw was found in Undertow Affected: All versions, or not specified |
| CVE-2021-20218 | 7.4 | Mar 16 | A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after Affected: All versions, or not specified |
| CVE-2021-3609 | 7.0 | Mar 3 | .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or… Affected: 1.0 |
| CVE-2021-4178 | 6.7 | Aug 24 | A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above Affected: 2.2.5 |
| CVE-2023-1664 | 6.5 | May 26 | A flaw was found in Keycloak Affected: All versions, or not specified |
| CVE-2019-14900 | 6.5 | Jul 6 | A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1 Affected: All versions, or not specified |
| CVE-2023-0044 | 6.1 | Feb 23 | If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated which might lead to the Information Disclosure Affected: All versions, or not specified |
| CVE-2021-3914 | 6.1 | Aug 25 | It was found that the smallrye health metrics UI component did not properly sanitize some user inputs Affected: before 2.7.5 |
| CVE-2021-3669 | 5.5 | Aug 26 | A flaw was found in the Linux kernel Affected: 2.0 before 2.7 |
| CVE-2021-3744 | 5.5 | Mar 4 | A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory… Affected: 2.0 |
| CVE-2023-6393 | 5.3 | Dec 6 | Quarkus: potential invalid reuse of context when @cacheresult on a uni is used Affected: All versions, or not specified |
| CVE-2021-3642 | 5.3 | Aug 5 | A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if… Affected: All versions, or not specified |
| CVE-2021-3536 | 4.8 | May 20 | A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field,… Affected: All versions, or not specified |
Showing 20