Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 175

Export CSV
CVE-2021-37533

Apache Commons Net's FTP client trusts the host from PASV response by default

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about services running on the private network of the client. The default in version 3.9.0 is now false to ignore such hosts, as cURL does. See https://issues.apache.org/jira/browse/NET-711.

CVSS 3.1 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Apache Debian Redhat
Products
Commons Net Debian Linux Camel Quarkus and 1 more
CVE-2021-22569

Denial of Service of protobuf-java parsing procedure

An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived objects that cause frequent, repeated pauses. We recommend upgrading libraries beyond the vulnerable versions.

CVSS 3.1 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Google Oracle Redhat
Products
Google-protobuf Protobuf-java Protobuf-kotlin and 11 more
CVE-2022-40149

Stack Buffer Overflow in Jettison

Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.

CVSS 3.1 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Debian Jettison Project Redhat
Products
Debian Linux Jettison Amq Streams and 8 more
CVE-2022-40150

Stack Buffer Overflow in Jettison

Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by Out of memory. This effect may support a denial of service attack.

CVSS 3.1 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Debian Jettison Project Redhat
Products
Debian Linux Jettison Amq Streams and 8 more
CVE-2024-26308

Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apache Redhat
Products
Commons Compress Amq Broker Camel Quarkus and 6 more
CVE-2023-1370

Stack exhaustion in json-smart leads to denial of service when parsing malformed JSON

[Json-smart](https://netplex.github.io/json-smart/) is a performance focused, JSON processor lib. When reaching a ‘[‘ or ‘{‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays and objects is done recursively, nesting too many of them can cause a stack exhaustion (stack overflow) and crash the software.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Json-smart Project Redhat
Products
Json-smart Amq Clients Amq Streams and 6 more
CVE-2023-1436

Infinite recursion in Jettison leads to denial of service when creating a crafted JSONArray

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.

CVSS 3.1 · 5.9 Medium EPSS 1.0% KEV · Not listed
Vendors
Jettison Project Redhat
Products
Jettison Camel Quarkus Camel Spring Boot and 6 more
CVE-2023-39410

Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK

When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2. Users should update to apache-avro version 1.11.3 which addresses this issue.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Apache Redhat
Products
Avro Camel Quarkus Jboss Enterprise Application Platform and 3 more
CVE-2023-40167

Jetty accepts "+" prefixed value in Content-Length

Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header field. This is more permissive than allowed by the RFC and other servers routinely reject such requests with 400 responses. There is no known exploit scenario, but it is conceivable that request smuggling could result if jetty is used in combination with a server that does not close the connection after sending such a 400 response. Versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1 contain a patch for this issue. There is no workaround as there is no known exploit scenario.

CVSS 3.1 · 5.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Debian Eclipse Redhat
Products
Debian Linux Jetty Amq Broker and 8 more
CVE-2020-17518

Apache Flink directory traversal attack: remote file writing through the REST API

Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be written to any location accessible by Flink 1.5.1. All users should upgrade to Flink 1.11.3 or 1.12.0 if their Flink instance(s) are exposed. The issue was fixed in commit a5264a6f41524afe8ceadf1d8ddc8c80f323ebc4 from apache/flink:master.

CVSS 3.1 · 7.5 High EPSS 49.4% KEV · Not listed
Vendors
Apache Redhat
Products
Flink Camel Quarkus Integration and 1 more
CVE-2020-13936

Velocity Sandbox Bypass

An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify velocity templates running Apache Velocity Engine versions up to 2.2.

CVSS 3.1 · 8.8 High EPSS 22.7% KEV · Not listed
Vendors
Apache Debian Oracle and 1 more
Products
Velocity Engine Wss4j Debian Linux and 19 more
CVE-2024-47561

Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)

Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.

CVSS 4.0 · 9.2 Critical EPSS 3.3% KEV · Not listed
Vendors
Apache Netapp Redhat
Products
Avro Active Iq Unified Manager Brocade San Navigator and 7 more
CVE-2024-41172

Apache CXF: Unrestricted memory consumption in CXF HTTP clients

In versions of Apache CXF before 3.6.4 and 4.0.5 (3.5.x and lower versions are not impacted), a CXF HTTP client conduit may prevent HTTPClient instances from being garbage collected and it is possible that memory consumption will continue to increase, eventually causing the application to run out of memory

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Apache Redhat
Products
Cxf Camel Quarkus Jboss Enterprise Application Platform
CVE-2024-32007

Apache CXF Denial of Service vulnerability in JOSE

An improper input validation of the p2c parameter in the Apache CXF JOSE code before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform a denial of service attack by specifying a large value for this parameter in a token. 

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Apache Redhat
Products
Cxf Apache-camel-spring-boot Apache Camel Spring Boot and 1 more
CVE-2023-4043

Parsson DoS when parsing numbers from untrusted sources

In Eclipse Parsson before versions 1.1.4 and 1.0.5, Parsing JSON from untrusted sources can lead malicious actors to exploit the fact that the built-in support for parsing numbers with large scale in Java has a number of edge cases where the input text of a number can lead to much larger processing time than one would expect. To mitigate the risk, parsson put in place a size limit for the numbers as well as their scale.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Eclipse Redhat
Products
Parsson Camel Quarkus Camel Spring Boot and 3 more
CVE-2022-4245

Codehaus-plexus: xml external entity (xxe) injection

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Codehaus-plexus Redhat
Products
Plexus-utils A Mq Clients Amq Broker and 20 more
CVE-2022-42889

Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation. Starting with version 1.5 and continuing through 1.9, the set of default Lookup instances included interpolators that could result in arbitrary code execution or contact with remote servers. These lookups are: - "script" - execute expressions using the JVM script execution engine (javax.script) - "dns" - resolve dns records - "url" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used. Users are recommended to upgrade to Apache Commons Text 1.10.0, which disables the problematic interpolators by default.

CVSS 3.1 · 9.8 Critical EPSS 99.9% KEV · Not listed
Vendors
Apache Juniper Netapp and 1 more
Products
Commons Text Jsa1500 Jsa3500 and 18 more
CVE-2022-1415

Drools: unsafe data deserialization in streamutils

A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data. This flaw allows an authenticated attacker to construct malicious serialized objects (usually called gadgets) and achieve code execution on the server.

CVSS 3.1 · 8.1 High EPSS 1.0% KEV · Not listed
Vendors
Redhat
Products
Camel Quarkus Camel Spring Boot Decision Manager and 13 more
CVE-2022-0981

quarkus: privilege escalation vulnerability with RestEasy Reactive scope leakage in Quarkus

A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Quarkus Redhat
Products
Quarkus Camel Quarkus Quarkus and 1 more