Lucene search
+L

2443 matches found

NVD
NVD
added 2026/08/27 6:17 a.m.7 views

CVE-2026-47889

A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...

7.5CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/27 5:52 a.m.4 views

CVE-2021-34429

CVE-2021-34429 CVE-2021-34429 の PoC - Eclipse Jetty 11.0.5 機密ファイル開示 エンコードされたURIを使用してWEB-INFディレクトリ内のファイルにアクセスする テスト環境のセットアップ 前提条件: システムにdockerとdocker-composeをインストールする Debianベースのディストリビューション(例: Ubuntu, Kali Linuxなど)では、以下のコマンドを使用してください。 root@kitploit: apt install docker.io apt install docker-compose...

5.3CVSS6.5AI score0.99298EPSS
SaveExploits6
CVE
CVE
added 2026/08/27 5:21 a.m.31 views

CVE-2026-47889

A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...

7.5CVSS5.3AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/27 5:21 a.m.5 views

EUVD-2026-66857

A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...

7.5CVSS5.2AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/27 4:31 a.m.1 views

jetty_9.4.31_CVE-2023-26048

Eclipse Jetty Canonical Repository 这是 Jetty 项目的官方仓库,欢迎随时 fork 并贡献代码! 想提交补丁或拉取请求? 请确保你已登记 Eclipse 贡献者协议(ECA)。 eclipse.org/legal/ecafaq 项目描述 Jetty 是一款轻量级、高度可扩展的基于 Java 的 Web 服务器和 Servlet 引擎。 我们的目标是以高吞吐量、低延迟的方式支持 HTTP、HTTP/2 和 WebSocket 等 Web 协议,在提供最大性能的同时,保留多年 Servlet 开发积累的易用性和兼容性。 Jetty 是一款现代的全异步...

5.3CVSS6.5AI score0.0326EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.150 views

CData Sync < 23.4.8843 - Path Traversal

A path traversal vulnerability exists in the Java version of CData Sync CData - Sync' - r...

8.6CVSS8.2AI score0.02885EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.29 views

Apache ActiveMQ 6.x < 6.1.2 - Broken Access Control

Apache ActiveMQ 6.x contains an unauthenticated API web context caused by default configuration lacking security measures in the Jetty server, letting anyone interact with broker APIs and messaging layers, exploit requires no authentication. id: CVE-2024-32114 info: name: Apache ActiveMQ 6.x 6.1....

8.8CVSS8.2AI score0.07148EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.125 views

CData API Server < 23.4.8844 - Path Traversal

A path traversal vulnerability exists in the Java version of CData API Server 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application. id: CVE-2024-31848 info: name: CData API Server...

9.8CVSS8.7AI score0.08086EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.32 views

Apache ActiveMQ < 5.16.5/5.17.3 - Remote Code Execution

Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ configurations, jetty allows org.jolokia.http.AgentServlet to handler request to /api/jolokia org.jolokia.http.HttpRequestHandlerhandlePostRequest is able to create JmxRequest...

8.8CVSS8.3AI score0.8581EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.93 views

CData Arc < 23.4.8839 - Path Traversal

A path traversal vulnerability exists in the Java version of CData Arc 23.4.8839 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions. id: CVE-2024-31850 info: name: CData Arc 23.4.88...

9.8CVSS8.5AI score0.08086EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.59 views

Eclipse Jetty - Information Disclosure

Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224 is susceptible to improper authorization. The default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. An attacker can access sensitive information regarding...

5.3CVSS6.4AI score0.82371EPSS
SaveExploits7References5
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.117 views

Eclipse Jetty <9.2.9.v20150224 - Sensitive Information Leakage

Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header. id: CVE-2015-2080 info: name: Eclipse Jetty 9.2.9.v20150224 - Sensitive Information Leakage author: pikpikcu severity: high description: Eclip...

7.5CVSS7.6AI score0.74881EPSS
SaveExploits16References5
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.73 views

Eclipse Jetty - Information Disclosure

Eclipse Jetty 9.4.37-9.4.42, 10.0.1-10.0.5 and 11.0.1-11.0.5 are susceptible to improper authorization. URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. An attacker can potentially obtain sensitive informatio...

5.3CVSS6.6AI score0.99298EPSS
SaveExploits6References5
Kitploit
Kitploit
added 2026/08/27 3:21 a.m.2 views

CVE-2024-31848-PoC

Jettyサーバー内のCDataの悪用 - CVE-2024-31848/49/50/51 - ファイルパストラバーサル&ファイル読み取り 概要 組み込みJettyサーバー上でCDataアプリケーションを実行しているターゲットに対する脆弱性分析を自動化するためのプロトタイプPoCです。 使用方法 ターゲットを指定するには、-uまたは--urlを使うだけです。スクリプトは、すべてのCDataインスタンスに存在するgetSettings.rsb?ファイルの取得を試みます。 例 注記 将来的に、より多くのエラーハンドリングが追加される予定です。 免責事項...

9.8CVSS8.7AI score0.08086EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 2:59 a.m.1 views

jetty_9.4.31_CVE-2021-34428

Repositório Canônico do Eclipse Jetty Este é o repositório canônico do projeto Jetty, sinta-se à vontade para fazer um fork e contribuir agora! Enviando um patch ou pull request? Certifique-se de ter um Eclipse Contributor Agreement ECA em arquivo. eclipse.org/legal/ecafaq Descrição do projeto O...

3.6CVSS6.2AI score0.00963EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 8:48 p.m.3 views

CVE-2019-17638-Jetty

JETTY Il progetto Jetty è un server HTTP 100% Java, un client HTTP e un contenitore di servlet della Eclipse Foundation http://www.eclipse.org/jetty/ Jetty è open source ed è distribuito con doppia licenza: Apache 2.0 e Eclipse Public License 1.0. Puoi scegliere una qualsiasi delle due licenze...

9.4CVSS8.6AI score0.11138EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 8:25 p.m.2 views

-jettyCVE-2021-28164-

-jettyCVE-2021-28164- jetty /CVE-2021-28164/ Analyse und Ergebnisse...

5.3CVSS6.5AI score0.82371EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/08/26 1:24 a.m.3 views

Jetty-v9.4.31_CVE-2023-40167

Questo repository non contiene un README...

5.3CVSS6.5AI score0.01069EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.92 views

Eclipse Jetty ConcatServlet - Information Disclosure

Eclipse Jetty through 9.4.40, through 10.0.2, and through 11.0.2 is susceptible to information disclosure. Requests to the ConcatServlet with a doubly encoded path can access protected resources within the WEB-INF directory, thus enabling an attacker to potentially obtain sensitive information,...

5.3CVSS6.5AI score0.7848EPSS
SaveExploits2References5
Kitploit
Kitploit
added 2026/08/25 4:26 a.m.1 views

jetty-9.4.31.v20200723_CVE-2023-26049

Dieses Repository hat keine README-Datei...

5.3CVSS6.2AI score0.013EPSS
SaveExploits0
Rows per page
Query Builder