Filter
AND
AND
Versions
Quarkus QuarkusQuarkus: build env information disclosure via gradle plugin
7.7
EPSS
0.09%
First published (updated )
maven/io.quarkus:quarkus-oidcQuarkus-oidc: id and access tokens leak via the authorization code flow
7.5
First published (updated )
Quarkus QuarkusQuarkus CORS filter allows simple GET and POST requests with invalid Origin to proceed. Simple GET o…
7.5
First published (updated )
redhat/candlepinIn FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/eap7-jackson-databindIn FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a ch…
7.5
First published (updated )
redhat/quarkusA flaw was found in Quarkus. The state and potentially associated permissions can leak from one web …
8.8
First published (updated )
Quarkus QuarkusMySQL Connector/J has no security check when external general entities are included in XML sources, …
7.9
First published (updated )
Oracle Banking Digital ExperienceLast updated 24 July 2024
7.5
First published (updated )
Oracle Banking Digital ExperienceLast updated 24 July 2024
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/eap7-apache-cxfCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions
7.5
First published (updated )
Gradle GradleRepository content filters do not work in Settings pluginManagement
8
First published (updated )
Gradle GradleLocal privilege escalation through system temporary directory
8.8
First published (updated )
FasterXML jackson-dataformats-binaryDenial of Service (DoS)
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle Peoplesoft Enterprise Pt PeopletoolsThe Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a relate…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.