TI-2024-01491 CVE-2024-1597 · GHSA-24rp-q3w6-vc56
pgjdbc SQL Injection via line comment generation
Priority HIGH 82
pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE.
RHSA-2024:4884
Red Hat Build of Apache Camel 4.4.1 for Spring Boot security update.
Released 2024-07-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2
Fixes 16 records
TI-2024-14794 CVE-2024-22201 · GHSA-rggv-cv7r-mw98
Jetty connection leaking on idle timeout when TCP congested
Priority HIGH 66
Jetty is a Java based web server and servlet engine.
TI-2024-19207 CVE-2024-29025 · GHSA-5jpm-x58v-624v
Netty HttpPostRequestDecoder can OOM
Priority MEDIUM 63
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
TI-2024-00946 CVE-2024-1023 · GHSA-5667-3wch-7q7w
Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx
Priority MEDIUM 62
A vulnerability in the Eclipse Vert.x toolkit results in a memory leak due to using Netty FastThreadLocal data structures.
TI-2024-05534 CVE-2024-5971 · GHSA-xpp6-8r3j-ww43
Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket
Priority MEDIUM 44
A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed.
TI-2024-14845 CVE-2024-22257 · GHSA-f3jh-qvm4-mg39
Missing authorization in Spring Security
Priority MEDIUM 43
In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, versions 6.2.x prior to 6.2.3, an application is possible vulnerable to broken acce…
TI-2024-05711 CVE-2024-6162 · GHSA-9442-gm4v-r222
Undertow: url-encoded request path information can be broken on ajp-listener
Priority MEDIUM 42
A vulnerability was found in Undertow, where URL-encoded request paths can be mishandled during concurrent requests on the AJP listener.
TI-2024-01518 CVE-2024-1635 · GHSA-w6qf-42m7-vh68
Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol
Priority MEDIUM 40
A vulnerability was found in Undertow.
TI-2024-14824 CVE-2024-22234 · GHSA-w3w6-26f2-p474
CVE-2024-22234: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated
Priority LOW 36
In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to broken access control when it directly uses the AuthenticationTrustResolver.isFullyAuthenticated(Authen…
TI-2024-19629 CVE-2024-29857 · GHSA-8xfc-gm6g-vgpv
An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java)…
Priority LOW 35
An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1.
TI-2024-22782 CVE-2024-34447 · GHSA-4h8f-2wvx-gg5w
An issue was discovered in the Bouncy Castle Crypto Package For Java before BC TLS Java…
Priority LOW 34
An issue was discovered in the Bouncy Castle Crypto Package For Java before BC TLS Java 1.0.19 (ships with BC Java 1.78, BC Java (LTS) 2.73.6) and before BC FIPS TLS Java 1.0.19.
TI-2024-19921 CVE-2024-30172 · GHSA-m44j-cfrm-g8qc
An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78.
Priority LOW 34
An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78.
TI-2024-19920 CVE-2024-30171 · GHSA-v435-xc8x-wvr9
An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78.
Priority LOW 28
An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78.
TI-2024-01210 CVE-2024-1300 · GHSA-9ph3-v2vh-3qx7
Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support
Priority LOW 27
A vulnerability in the Eclipse Vert.x toolkit causes a memory leak in TCP servers configured with TLS and SNI support.
TI-2023-27923 CVE-2023-51079 · GHSA-h63j-xqx6-w58r
A long execution time can occur in the ParseTools.subCompileExpression method in MVEL…
Priority LOW 25
A long execution time can occur in the ParseTools.subCompileExpression method in MVEL 2.5.0.Final because of many Java class lookups.
TI-2024-15217 CVE-2024-23081 · GHSA-fhx3-mxf6-jxpv
ThreeTen Backport v1.6.8 was discovered to contain a NullPointerException via the…
Priority LOW 15
ThreeTen Backport v1.6.8 was discovered to contain a NullPointerException via the component org.threeten.bp.LocalDate::compareTo(ChronoLocalDate).