CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

697 matches found

vulnersOsv•added 2026/05/07 12:22 a.m.•3 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4650 more potentially affected by CVE-2026-42585 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.12.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.5.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-42585 Source advisory: SNYK:JAVA-IONETTY-16438737...

7.5CVSS7AI score0.00293EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:20 a.m.•5 views

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +5581 more potentially affected by CVE-2026-42583 via io.netty:netty-codec-compression (>=4.2.0.alpha3, <=4.2.12.final)

io.netty:netty-codec-compression MAVEN version =4.2.0.alpha3, =0.4.0, =0.4.0, =0.1.0, =0.1.0, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.0-rc.2 and more Source cves: CVE-2026-42583 Source advisory: OSV:GHSA-MJ4R-2HFC-F8P6...

7.5CVSS7AI score0.00486EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:19 a.m.•1 views

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1587 more potentially affected by CVE-2026-42582 via io.netty:netty-codec-http3 (>=4.2.2.final, <=4.2.12.final)

io.netty:netty-codec-http3 MAVEN version =4.2.2.final, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.5.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-42582 Source advisory: SNYK:JAVA-IONETTY-16438978...

7.5CVSS7.2AI score0.00486EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:18 a.m.•3 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43224 more potentially affected by CVE-2026-42581 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...

9.8CVSS6.9AI score0.00684EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:13 a.m.•3 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43224 more potentially affected by CVE-2026-42580 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)

6.5CVSS7AI score0.00362EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:13 a.m.•3 views

6.5CVSS7AI score0.00362EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:12 a.m.•2 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +24744 more potentially affected by CVE-2026-42579 via io.netty:netty-codec-dns (>=4.1.0.beta4, <=4.1.132.final)

io.netty:netty-codec-dns MAVEN version =4.1.0.beta4, =0.0.1, =1.0.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves: CVE-2026-42579 Source...

9.1CVSS7AI score0.00847EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:12 a.m.•2 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.covia:covia-sql (0.6.0) +3363 more potentially affected by CVE-2026-42579 via io.netty:netty-codec-dns (>=4.2.0.alpha1, <=4.2.12.final)

io.netty:netty-codec-dns MAVEN version =4.2.0.alpha1, =0.4.0, =0.4.0, =1.0.0-beta, =0.6.4, =0.6.4, =0.6.4, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-42579 Source advisory: GHSA-CM33-6792-R9FM...

9.1CVSS7AI score0.00847EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:12 a.m.•5 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.covia:covia-sql (0.6.0) +3363 more potentially affected by CVE-2026-42579 via io.netty:netty-codec-dns (>=4.2.0.alpha1, <=4.2.12.final)

9.1CVSS7AI score0.00847EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:12 a.m.•2 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.covia:covia-sql (0.6.0) +3363 more potentially affected by CVE-2026-42579 via io.netty:netty-codec-dns (>=4.2.0.alpha1, <=4.2.12.final)

9.1CVSS7AI score0.00847EPSS

SaveExploits1

vulnersOsv•added 2026/05/05 6:27 p.m.•2 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43224 more potentially affected by CVE-2026-41417 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)

5.3CVSS6.3AI score0.00336EPSS

SaveExploits1

vulnersOsv•added 2026/05/05 6:27 p.m.•2 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4650 more potentially affected by CVE-2026-41417 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.12.final)

5.3CVSS6.3AI score0.00336EPSS

SaveExploits1

Snyk•added 2026/05/05 6:27 p.m.•14 views

HTTP Request Smuggling

Overview io.netty:netty-codec-http is a network application framework for rapid development of maintainable high performance protocol servers & clients. Affected versions of this package are vulnerable to HTTP Request Smuggling in the setUri function. An attacker can inject arbitrary CRLF sequenc...

6.5CVSS6.2AI score0.00336EPSS

SaveExploits1References3

IBM Security Bulletins•added 2026/04/22 1:57 p.m.•21 views

Security Bulletin: Rational Test Automation Server is vulnerable to request smuggling using CRLF injection due to netty-codec-http (CVE-2025-67735)

Summary Due to use of netty-codec-http, Rational Test Automation Server and IBM DevOps Test Hub contain a CRLF injection based request smuggling vulnerability CVE-2025-67735. The netty-codec-http java library is used for asynchronous HTTP handling capabilities. Vulnerability Details...

6.5CVSS6.3AI score0.0032EPSS

SaveExploits1Affected Software1

Atlassian•added 2026/04/14 10:29 p.m.•45 views

DoS (Denial of Service) io.netty:netty-codec-http2 Dependency in Bamboo Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

8.7CVSS6.8AI score0.012EPSS

SaveExploits0

vulnersOsv•added 2026/03/27 7:54 p.m.•2 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43013 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.131.final)

7.5CVSS6.5AI score0.00698EPSS

SaveExploits1

vulnersOsv•added 2026/03/26 6:49 p.m.•2 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +34185 more potentially affected by CVE-2026-33871 via io.netty:netty-codec-http2 (>=4.1.0.beta4, <=4.1.131.final)

io.netty:netty-codec-http2 MAVEN version =4.1.0.beta4, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...

8.7CVSS7AI score0.012EPSS

SaveExploits0

vulnersOsv•added 2026/03/26 6:48 p.m.•3 views

7.5CVSS6.5AI score0.00698EPSS

SaveExploits1

vulnersOsv•added 2026/03/26 6:48 p.m.•3 views

7.5CVSS6.5AI score0.00698EPSS

SaveExploits1

vulnersOsv•added 2026/03/26 6:48 p.m.•6 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.platon.gora:gora-core (1.0.0) +3345 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.9.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.10.7 and more Source cves: CVE-2026-33870 Source advisory: OSV:GHSA-PWQR-WMGM-9RR8...

7.5CVSS6.5AI score0.00698EPSS

SaveExploits1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by