CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

785 matches found

vulnersOsv•added 2026/05/07 12:19 a.m.•3 views

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1601 more potentially affected by CVE-2026-42582 via io.netty:netty-codec-http3 (>=4.2.2.final, <=4.2.12.final)

io.netty:netty-codec-http3 MAVEN version =4.2.2.final, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.5.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-42582 Source advisory: SNYK:JAVA-IONETTY-16438978...

7.5CVSS7.2AI score0.00437EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:18 a.m.•4 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43381 more potentially affected by CVE-2026-42581 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...

9.8CVSS6.9AI score0.0063EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:13 a.m.•4 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43381 more potentially affected by CVE-2026-42580 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)

6.5CVSS7AI score0.00378EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:13 a.m.•4 views

6.5CVSS7AI score0.00378EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:12 a.m.•4 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +24990 more potentially affected by CVE-2026-42579 via io.netty:netty-codec-dns (>=4.1.0.beta4, <=4.1.132.final)

io.netty:netty-codec-dns MAVEN version =4.1.0.beta4, =0.0.1, =1.0.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves: CVE-2026-42579 Source...

9.1CVSS7AI score0.01006EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:12 a.m.•3 views

9.1CVSS7AI score0.01006EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:12 a.m.•3 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.covia:covia-sql (0.6.0) +3377 more potentially affected by CVE-2026-42579 via io.netty:netty-codec-dns (>=4.2.0.alpha1, <=4.2.12.final)

io.netty:netty-codec-dns MAVEN version =4.2.0.alpha1, =0.4.0, =0.4.0, =1.0.0-beta, =0.6.4, =0.6.4, =0.6.4, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-42579 Source advisory: GHSA-CM33-6792-R9FM...

9.1CVSS7AI score0.01006EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:12 a.m.•6 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.covia:covia-sql (0.6.0) +3377 more potentially affected by CVE-2026-42579 via io.netty:netty-codec-dns (>=4.2.0.alpha1, <=4.2.12.final)

9.1CVSS7AI score0.01006EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:12 a.m.•4 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.covia:covia-sql (0.6.0) +3377 more potentially affected by CVE-2026-42579 via io.netty:netty-codec-dns (>=4.2.0.alpha1, <=4.2.12.final)

9.1CVSS7AI score0.01006EPSS

SaveExploits1

vulnersOsv•added 2026/05/05 6:27 p.m.•4 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43381 more potentially affected by CVE-2026-41417 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)

5.3CVSS6.5AI score0.00318EPSS

SaveExploits1

vulnersOsv•added 2026/05/05 6:27 p.m.•3 views

5.3CVSS6.5AI score0.00318EPSS

SaveExploits1

vulnersOsv•added 2026/05/05 6:27 p.m.•3 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4669 more potentially affected by CVE-2026-41417 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.12.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.5.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-41417 Source advisory: OSV:GHSA-V8H7-RR48-VMMV...

5.3CVSS6.5AI score0.00318EPSS

SaveExploits1

Snyk•added 2026/05/05 6:27 p.m.•14 views

HTTP Request Smuggling

Overview io.netty:netty-codec-http is a network application framework for rapid development of maintainable high performance protocol servers & clients. Affected versions of this package are vulnerable to HTTP Request Smuggling in the setUri function. An attacker can inject arbitrary CRLF sequenc...

6.5CVSS6.3AI score0.00318EPSS

SaveExploits1References3

IBM Security Bulletins•added 2026/04/22 1:57 p.m.•23 views

Security Bulletin: Rational Test Automation Server is vulnerable to request smuggling using CRLF injection due to netty-codec-http (CVE-2025-67735)

Summary Due to use of netty-codec-http, Rational Test Automation Server and IBM DevOps Test Hub contain a CRLF injection based request smuggling vulnerability CVE-2025-67735. The netty-codec-http java library is used for asynchronous HTTP handling capabilities. Vulnerability Details...

6.5CVSS6.3AI score0.0032EPSS

SaveExploits1Affected Software1

Atlassian•added 2026/04/14 10:29 p.m.•45 views

DoS (Denial of Service) io.netty:netty-codec-http2 Dependency in Bamboo Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

8.7CVSS6.8AI score0.01145EPSS

SaveExploits0

vulnersOsv•added 2026/03/27 7:55 p.m.•4 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +34238 more potentially affected by CVE-2026-33871 via io.netty:netty-codec-http2 (>=4.1.0.beta4, <=4.1.131.final)

io.netty:netty-codec-http2 MAVEN version =4.1.0.beta4, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...

8.7CVSS7AI score0.01145EPSS

SaveExploits0

vulnersOsv•added 2026/03/27 7:54 p.m.•3 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43169 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.131.final)

7.5CVSS6.5AI score0.00701EPSS

SaveExploits1

vulnersOsv•added 2026/03/26 6:49 p.m.•3 views

8.7CVSS7AI score0.01145EPSS

SaveExploits0

vulnersOsv•added 2026/03/26 6:49 p.m.•3 views

8.7CVSS7AI score0.01145EPSS

SaveExploits0

vulnersOsv•added 2026/03/26 6:49 p.m.•4 views

8.7CVSS7AI score0.01145EPSS

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by