Medium
CVE-2023-37465
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filters
High
CVE-2026-102695
OmniFaces: Forged combined-resource IDs and related output/push boundaries
High
CVE-2026-73493
blaze: Unbounded WebSocket message aggregation in http4s-blaze-server
High
CVE-2026-73495
blaze: Chunked-body trailer fields promoted into Request.headers in blaze-server (front-end header-sanitization bypass)
High
CVE-2026-73494
blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser
Critical
CVE-2026-73644
OpenDJ SASL PLAIN authzid bypassing the proxy ACI scope check
Critical
ghsa-68r5-9hpg-7qw9
OpenDJ unauthenticated SSRF, local file read and unbounded-read DoS in the DSMLv2 gateway
Critical
CVE-2026-62379
OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback
High
CVE-2026-73507
Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion
Medium
CVE-2026-73508
Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names
High
CVE-2024-7708
Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests
Medium
CVE-2026-8384
Eclipse Jetty: Path parameter traversal
Medium
CVE-2026-6790
Eclipse Jetty: HTTP Authority/Host mismatch
Medium
CVE-2026-10051
Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections
High
CVE-2026-10050
Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution
Medium
CVE-2026-59921
Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder
Medium
CVE-2026-59919
Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address
High
CVE-2026-56822
Netty: TOCTOU in OcspServerCertificateValidator
High
CVE-2026-56821
Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator
High
CVE-2026-56820
Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks
High
CVE-2026-56816
Netty: Memory Exhaustion via HTTP/3 Reserved Frame Types
High
CVE-2026-55831
Netty SPDY SETTINGS frame count materializes unbounded settings map
High
CVE-2026-68494
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
High
CVE-2026-54291
PostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.