Known vulnerabilities in Red Hat build of Quarkus - page 2

Software CPE: cpe:2.3:a:red_hat:red_hat_build_of_quarkus:*:*:*:*:*:*:*:*
Total vulnerabilities: 66
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat build of Quarkus Red Hat build of Quarkus is affected by 66 known vulnerabilities: 12 high, 43 medium, 11 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98024 - Improper input validation
CVE-2024-47561
CWE-20 High
No
No
3.2.12.SP1, 3.8.6.SP1 03.10.2024 SB2024100351
SB2024100504
SB2024100984
and 36 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254
CWE-674 Medium
No
No
3.2.12.SP1, 3.8.6.SP1 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU91686 - Cleartext Storage of Sensitive Information
CVE-2024-2700
CWE-312 Low
No
No
3.2.12, 3.8.4 11.06.2024 SB2024061114
SB20240611171
SB2024061840
and 7 more
#VU89005 - Resource exhaustion
CVE-2024-1726
CWE-400 Medium
No
No
3.2.11 25.04.2024 SB2024042553
SB2024042554
SB2024081544
#VU88663 - Improper input validation
CVE-2024-20954
CWE-20 Low
No
No
3 17.04.2024 SB2024041764
SB2024041766
SB2024062515
and 3 more
#VU88664 - Improper input validation
CVE-2024-21098
CWE-20 Low
No
No
3 17.04.2024 SB2024041764
SB2024041766
SB2024062515
and 4 more
#VU88190 - Exposure of sensitive information to an unauthorized actor
CVE-2024-1979
CWE-200 Medium
No
No
3.2.11 05.04.2024 SB2024040544
SB2024042554
#VU88189 - Missing release of memory after effective lifetime
CVE-2024-1023
CWE-401 Medium
No
No
3.2.11 05.04.2024 SB2024040542
SB2024042554
SB2024042918
and 10 more
#VU88188 - Missing release of memory after effective lifetime
CVE-2024-1300
CWE-401 Medium
No
No
3.2.11 05.04.2024 SB2024040543
SB2024041939
SB2024042554
and 13 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025
CWE-200 Medium
No
No
3.2.12, 3.8.4 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU86983 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-1597
CWE-89 High
No
No
2.13.9.SP2, 3.2.11 04.03.2024 SB2024030405
SB2024030406
SB2024030427
and 47 more
#VU86625 - Resource exhaustion
CVE-2024-26308
CWE-400 Medium
No
No
2.13.9.SP2, 3.2.11 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710
CWE-835 Medium
No
No
2.13.9.SP2, 3.2.11 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 102 more
#VU86290 - Stack-based buffer overflow
CVE-2023-51074
CWE-121 Medium
No
No
3.2.10 09.02.2024 SB2024020912
SB2024021238
SB2024021241
and 37 more
#VU85807 - Improper Authorization
CVE-2023-5675
CWE-285 Medium
No
No
2.13.9.SP1, 3.2.9.SP1 25.01.2024 SB2024012543
SB2024030745
SB2024040813
#VU85806 - Deserialization of Untrusted Data
CVE-2023-6267
CWE-502 High
No
No
2.13.9.SP1, 3.2.9.SP1 25.01.2024 SB2024012543
SB2024030745
SB2024040813
#VU85304 - Excessive Iteration
CVE-2023-4043
CWE-834 Medium
No
No
3.2.10 11.01.2024 SB2024011123
SB2024012646
SB2024020506
and 15 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795
CWE-326 Low
Available
No
3.2.10 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483
CWE-532 Medium
No
No
3.2.10 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU82144 - Improper input validation
CVE-2023-22102
CWE-20 High
No
No
3.2.10 17.10.2023 SB20231017102
SB2024011662
SB2024011663
and 8 more


Showing elements 21 - 40 out of 66