CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5340 matches found

vulnersOsv•added 2026/05/13 6:22 p.m.•3 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +34445 more potentially affected by CVE-2026-42587 via io.netty:netty-codec-http2 (>=4.1.0.beta4, <=4.1.132.final)

io.netty:netty-codec-http2 MAVEN version =4.1.0.beta4, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...

7.5CVSS7AI score0.0099EPSS

SaveExploits1

vulnersOsv•added 2026/05/13 6:22 p.m.•4 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4097 more potentially affected by CVE-2026-42587 via io.netty:netty-codec-http2 (>=4.2.0.alpha1, <=4.2.12.final)

io.netty:netty-codec-http2 MAVEN version =4.2.0.alpha1, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.5.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-42587 Source advisory: MEND:CVE-2026-42587...

7.5CVSS7AI score0.0099EPSS

SaveExploits1

vulnersOsv•added 2026/05/13 6:20 p.m.•2 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.chronon:service_2.11 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115) +4652 more potentially affected by CVE-2026-42586 via io.netty:netty-codec-redis (>=4.1.0.final, <=4.1.132.final)

io.netty:netty-codec-redis MAVEN version =4.1.0.final, =0.0.1, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =3.30.1.1, =3.10.0.5, =0.2.3.5, =0.0.1, =5.1.0, =2.0.21, =2.0.28 and more Source cve...

7.1CVSS6.9AI score0.00217EPSS

SaveExploits1

vulnersOsv•added 2026/05/13 6:20 p.m.•3 views

ai.spice:spiceai (0.6.0), ch.zzeekk.spark:spark-temporalquery_2.13 (4.0.0) +804 more potentially affected by CVE-2026-42586 via io.netty:netty-codec-redis (>=4.2.0.alpha1, <=4.2.12.final)

io.netty:netty-codec-redis MAVEN version =4.2.0.alpha1, =4.2.12.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-codec-redis and may be impacted: - ai.spice:spiceai 0.6.0 - ch.zzeekk.spark:spark-temporalquery2.13 4.0.0 -...

7.1CVSS6.9AI score0.00217EPSS

SaveExploits1

Vulnrichment•added 2026/05/13 6:20 p.m.•16 views

CVE-2026-42586 Netty: CRLF Injection in Netty Redis Codec Encoder

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the Netty Redis codec encoder RedisEncoder writes user-controlled string content directly to the network output buffer without validating or sanitizing CRLF \r\n characters. Since the...

6.8CVSS7.2AI score0.00217EPSS

SaveExploits1References1

vulnersOsv•added 2026/05/13 6:12 p.m.•4 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43381 more potentially affected by CVE-2026-42585 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...

7.5CVSS7AI score0.00267EPSS

SaveExploits1

vulnersOsv•added 2026/05/13 6:12 p.m.•4 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4669 more potentially affected by CVE-2026-42585 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.12.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.5.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-42585 Source advisory: MEND:CVE-2026-42585...

7.5CVSS7AI score0.00267EPSS

SaveExploits1

vulnersOsv•added 2026/05/13 6:10 p.m.•4 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43381 more potentially affected by CVE-2026-42584 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)

9.1CVSS7AI score0.00838EPSS

SaveExploits1

vulnersOsv•added 2026/05/13 6:10 p.m.•3 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4669 more potentially affected by CVE-2026-42584 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.12.final)

9.1CVSS7AI score0.00838EPSS

SaveExploits1

osv_cve•added 2026/05/13 6:10 p.m.•17 views

CVE-2026-42584 Netty: HttpClientCodec response desynchronization

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpClientCodec pairs each inbound response with an outbound request by queue.poll once per response, including for 1xx. If the client pipelines GET then HEAD and the server sends 103,...

7.3CVSS6.9AI score0.00838EPSS

SaveExploits1References22

vulnersOsv•added 2026/05/13 6:09 p.m.•6 views

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +5615 more potentially affected by CVE-2026-42583 via io.netty:netty-codec-compression (>=4.2.0.alpha3, <=4.2.12.final)

io.netty:netty-codec-compression MAVEN version =4.2.0.alpha3, =0.4.0, =0.4.0, =0.1.0, =0.1.0, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.3 and more Source cves: CVE-2026-42583 Source advisory: MEND:CVE-2026-42583...

7.5CVSS7AI score0.00461EPSS

SaveExploits1

vulnersOsv•added 2026/05/13 6:06 p.m.•7 views

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1601 more potentially affected by CVE-2026-42582 via io.netty:netty-codec-http3 (>=4.2.2.final, <=4.2.12.final)

io.netty:netty-codec-http3 MAVEN version =4.2.2.final, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.5.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-42582 Source advisory: MEND:CVE-2026-42582...

7.5CVSS7.2AI score0.00437EPSS

SaveExploits1

vulnersOsv•added 2026/05/13 6:04 p.m.•4 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43381 more potentially affected by CVE-2026-42580 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)

6.5CVSS7AI score0.00378EPSS

SaveExploits1

vulnersOsv•added 2026/05/13 6:04 p.m.•4 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4669 more potentially affected by CVE-2026-42580 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.12.final)

6.5CVSS7AI score0.00378EPSS

SaveExploits1

vulnersOsv•added 2026/05/13 6:01 p.m.•4 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +24990 more potentially affected by CVE-2026-42579 via io.netty:netty-codec-dns (>=4.1.0.beta4, <=4.1.132.final)

io.netty:netty-codec-dns MAVEN version =4.1.0.beta4, =0.0.1, =1.0.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves: CVE-2026-42579 Source...

9.1CVSS7AI score0.01006EPSS

SaveExploits1

vulnersOsv•added 2026/05/13 6:01 p.m.•6 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.covia:covia-sql (0.6.0) +3377 more potentially affected by CVE-2026-42579 via io.netty:netty-codec-dns (>=4.2.0.alpha1, <=4.2.12.final)

io.netty:netty-codec-dns MAVEN version =4.2.0.alpha1, =0.4.0, =0.4.0, =1.0.0-beta, =0.6.4, =0.6.4, =0.6.4, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-42579 Source advisory: MEND:CVE-2026-42579...

9.1CVSS7AI score0.01006EPSS

SaveExploits1

Mend•added 2026/05/13 6:01 p.m.•12 views

CVE-2026-42579

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encoding or decoding. This creates a bidirectional attack surface: malicious DNS responses can exploit t...

9.1CVSS6.9AI score0.01006EPSS

SaveExploits1References23

CVE•added 2026/05/13 6:01 p.m.•258 views

CVE-2026-42579

Summary: CVE-2026-42579 affects the Netty framework’s DNS codec. Affected versions: prior to 4.2.13.Final and 4.1.133.Final. Root cause: DNS encoding/decoding did not enforce RFC 1035 domain name constraints. Impact: potential bidirectional attack surface via malicious DNS responses (decoder) or ...

9.1CVSS6.9AI score0.01006EPSS

SaveExploits1References17Affected Software1

vulnersOsv•added 2026/05/13 5:54 p.m.•4 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43381 more potentially affected by CVE-2026-42581 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)

9.8CVSS6.9AI score0.0063EPSS

SaveExploits1

vulnersOsv•added 2026/05/13 5:54 p.m.•5 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4669 more potentially affected by CVE-2026-42581 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.12.final)

9.8CVSS6.9AI score0.0063EPSS

SaveExploits1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by