Lucene search
+L

763 matches found

Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•21 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: resteasy (UTSA-2026-016727)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016727 advisory. A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when...

5.3CVSS6.3AI score0.014EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•26 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: resteasy (UTSA-2026-016699)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016699 advisory. JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could...

8.1CVSS7.8AI score0.0597EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•20 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: resteasy (UTSA-2026-016757)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016757 advisory. A cross-site scripting XSS flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly handle URL encoding when the...

6.1CVSS6.6AI score0.01388EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/05 12:00 a.m.•2 views

CVE-2026-39852: Incorrect Authorization

Quarkus is a Java framework for building cloud-native applications. In versions prior to 3.20.6.1, 3.27.3.1, 3.33.1.1, 3.35.1.1, 3.34.7, and 3.35.2, a path normalization inconsistency between the security layer and the routing layer allows unauthenticated or lower-privileged users to bypass HTTP...

8.8CVSS5.9AI score0.00633EPSS
SaveExploits0References4
OSV
OSV
•added 2026/05/04 5:20 p.m.•32 views

GHSA-RC95-PCM8-65V9 Quarkus has Authentication/Authorization bypasses

Quarkus version 3.32.4 is vulnerable to an authorization bypass issue GHSL-2026-099, in which semicolons matrix parameters in HTTP requests can be used to bypass security constraints, potentially allowing unauthorized access to protected resources. Unauthenticated or lower-privileged users can...

8.8CVSS5.9AI score0.00633EPSS
SaveExploits0References13
IBM Security Bulletins
IBM Security Bulletins
•added 2026/02/17 8:47 a.m.•26 views

Security Bulletin: IBM Event Streams is vulnerable to a denial of service

Summary IBM Event Streams is vulnerable to a denial of service due to improper buffer release in quarkus-resteasy. CVE-2025-1634 Vulnerability Details CVEID:CVE-2025-1634 DESCRIPTION: A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low...

7.5CVSS7.4AI score0.00821EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/01/20 12:00 a.m.•10 views

MiracleLinux 8 : pki-deps:10.6 (AXSA:2021-2278:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2278:01 advisory. resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class CVE-2020-1695 Tenable has extracted the preceding description block...

7.5CVSS7.3AI score0.02017EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/20 12:00 a.m.•10 views

MiracleLinux 8 : pki-core:10.6 (AXSA:2021-2287:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2287:01 advisory. resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class CVE-2020-1695 Tenable has extracted the preceding description block...

7.5CVSS7.3AI score0.02017EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•13 views

MiracleLinux 7 : resteasy-base-3.0.6-4.el7 (AXSA:2016-1120:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-1120:01 advisory. RESTEasy contains a JBoss project that provides frameworks to help build RESTful Web Services and RESTful Java applications. It is a fully certified and...

9.8CVSS7.6AI score0.05309EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2025/12/16 11:13 p.m.•21 views

Important: Red Hat Security Advisory: Streams for Apache Kafka 3.1.0 release and security update

Streams for Apache Kafka 3.1.0 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

8.2CVSS6.5AI score0.68776EPSS
SaveExploits6References13
RedHat Linux
RedHat Linux
•added 2025/12/16 11:13 p.m.•31 views

io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

7.5CVSS5.9AI score0.00821EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2021-1269

Malware in sbrugna...

6.1CVSS6.3AI score0.00856EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2021-1240

Malware in sbrugna...

6.1CVSS7.1AI score0.01388EPSS
SaveExploits1References15
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2021-1336

Malware in sbrugna...

5.3CVSS6.8AI score0.01178EPSS
SaveExploits0References14
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2021-1298

Malware in sbrugna...

4.3CVSS5.7AI score0.00629EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2016-7931

Malware in sbrugna...

9.8CVSS7.8AI score0.05309EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2021-0732

Malware in sbrugna...

5.3CVSS6.8AI score0.014EPSS
SaveExploits0References26
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-3884

Malicious code in bioql PyPI...

5CVSS8.9AI score0.03213EPSS
SaveExploits0References32
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-5634

Malicious code in bioql PyPI...

5CVSS8.9AI score0.03213EPSS
SaveExploits0References38
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2022-4992

Malicious code in bioql PyPI...

7.5CVSS8.1AI score0.04572EPSS
SaveExploits0References30
Rows per page
Query Builder