BO
Product
Build OF Quarkus
by Redhat · last CVE Dec 9, 2023
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 10Low 0
Watch

Add Build OF Quarkus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-4178
6.7
0%
Aug 24
A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above
Affected: 2.2.5
CVE-2023-1664
6.5
0%
May 26
A flaw was found in Keycloak
Affected: All versions, or not specified
CVE-2019-14900
6.5
2%
Jul 6
A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1
Affected: All versions, or not specified
CVE-2023-0044
6.1
1%
Feb 23
If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated which might lead to the Information Disclosure
Affected: All versions, or not specified
CVE-2021-3914
6.1
1%
Aug 25
It was found that the smallrye health metrics UI component did not properly sanitize some user inputs
Affected: before 2.7.5
CVE-2021-3669
5.5
0%
Aug 26
A flaw was found in the Linux kernel
Affected: 2.0 before 2.7
CVE-2021-3744
5.5
1%
Mar 4
A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory…
Affected: 2.0
CVE-2023-6393
5.3
1%
Dec 6
Quarkus: potential invalid reuse of context when @cacheresult on a uni is used
Affected: All versions, or not specified
CVE-2021-3642
5.3
1%
Aug 5
A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if…
Affected: All versions, or not specified
CVE-2021-3536
4.8
1%
May 20
A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field,…
Affected: All versions, or not specified
Showing 10