Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

17 records

Priority MEDIUM 53

An issue was discovered in OpenDDS commit b1c534032bb62ad4ae32609778de6b8d6c823a66, allows a local attacker to cause a denial of service and obtain sensitive information via the max_samples parameter within the DataReade…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00476 Published 2024-04-11 No fix listed CWE-400
Priority LOW 34

Micronaut Framework is a modern, JVM-based, full stack Java framework designed for building modular, easily testable JVM applications with support for Java, Kotlin and the Groovy language.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00261 Published 2024-02-09 Fixed in 3.8.3 CWE-15
TI-2021-16032 CVE-2021-38429 · GHSA-gjcc-3vr8-g68x

OCI OpenDDS Secure Network Amplification

Priority MEDIUM 42

OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition and information expos…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01466 Published 2022-05-05 Fixed in 3.18.1 CWE-406
TI-2021-16047 CVE-2021-38447 · GHSA-w75x-f9jm-qxx4

OCI OpenDDS Secure Amplification

Priority MEDIUM 47

OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02137 Published 2022-05-05 Fixed in 3.18.1 CWE-405
Priority MEDIUM 47

OCI OpenDDS versions prior to 3.18.1 do not handle a length parameter consistent with the actual length of the associated data, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0268 Published 2022-05-05 Fixed in 3.18.1 CWE-130
TI-2022-06076 CVE-2022-21700 · GHSA-2457-2263-mm9f

Memory leak in micronaut-core

Priority LOW 32

Micronaut is a JVM-based, full stack Java framework designed for building JVM web applications with support for Java, Kotlin and the Groovy language.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0115 Published 2022-01-18 Fixed in 3.2.7 CWE-400
Priority MEDIUM 46

All versions of io.micronaut:micronaut-http-client before 1.2.11 and all versions from 1.3.0 before 1.3.2 are vulnerable to HTTP Request Header Injection due to not validating request headers passed to the client.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01814 Published 2020-03-30 Fixed in 1.2.11, 1.3.2 CWE-444