Search Results (83 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-25857 3 Debian, Redhat, Snakeyaml Project 18 Debian Linux, Amq Broker, Amq Clients and 15 more 2024-11-21 7.5 High
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.
CVE-2022-1415 1 Redhat 16 Camel Quarkus, Camel Spring Boot, Decision Manager and 13 more 2024-11-21 8.1 High
A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data. This flaw allows an authenticated attacker to construct malicious serialized objects (usually called gadgets) and achieve code execution on the server.
CVE-2022-40156 1 Redhat 2 Camel Quarkus, Camel Spring Boot 2023-11-07 7.5 High
DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.