CWE-1035 · 13 kayıt

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

Bu sınıftaki CVE’ler

13 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
30İzleyin	CVE-2026-93558İstismar yok	Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of servicered hat · red hat amq broker 7 · CWE-1035 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%1,0	18 Eyl 2026
30İzleyin	CVE-2026-93564İstismar yok	Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881)red hat · red hat amq broker 7 · CWE-1035 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,9	18 Eyl 2026
30İzleyin	CVE-2026-93565İstismar yok	Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control bytered hat · red hat amq broker 7 · CWE-1035 Kimlik doğrulamasız	Yüksek7,5	—	%0,7	18 Eyl 2026
30İzleyin	CVE-2026-93494İstismar yok	Io.netty/netty-codec-stomp: netty: bytebuf leak in stompsubframedecoder when a frame body is never terminatedred hat · red hat build of apache camel for spring boot 4 · CWE-1035 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,4	18 Eyl 2026
30İzleyin	CVE-2026-93560İstismar yok	Io.netty/netty-codec-stomp: netty: stomp codec content-length long-to-int truncation causes infinite decode loop dosred hat · red hat build of apache camel for spring boot 4 · CWE-1035 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,4	18 Eyl 2026
30İzleyin	CVE-2026-93575İstismar yok	Io.netty/netty-codec-mqtt: netty: resource exhaustion in mqttdecoderred hat · red hat amq broker 7 · CWE-1035 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,4	18 Eyl 2026
30İzleyin	CVE-2026-93563İstismar yok	Io.netty/netty-codec-smtp: netty: unbounded multi-line response accumulation in smtpresponsedecoder leads to memory-exhaustion dosred hat · red hat build of apache camel for spring boot 4 · CWE-1035 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,3	18 Eyl 2026
26İzleyin	CVE-2026-93579İstismar yok	Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)red hat · red hat amq broker 7 · CWE-1035 Kimlik doğrulamasız	Orta6,5	—	%0,9	18 Eyl 2026
26İzleyin	CVE-2026-93566İstismar yok	Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size linered hat · red hat amq broker 7 · CWE-1035 Kimlik doğrulamasız	Orta6,5	—	%0,5	18 Eyl 2026
26İzleyin	CVE-2026-93562İstismar yok	Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smugglingred hat · red hat amq broker 7 · CWE-1035 Kimlik doğrulamasız	Orta6,5	—	%0,4	18 Eyl 2026
26İzleyin	CVE-2026-93561İstismar yok	Io.netty/netty-codec-memcache: netty: memcache binary codec signed/unsigned type mismatch causes frame desynchronization and response smugglingred hat · red hat build of apache camel for spring boot 4 · CWE-1035 Kimlik doğrulamasız	Orta6,5	—	%0,3	18 Eyl 2026
23İzleyin	CVE-2026-93578İstismar yok	Io.netty/netty-handler-ssl-ocsp: netty: missing extended key usage (eku) check in ocsp client allows certificate revocation bypassred hat · red hat build of apache camel for spring boot 4 · CWE-1035 Kimlik doğrulamasız	Orta5,9	—	%0,2	18 Eyl 2026
21İzleyin	CVE-2026-93492İstismar yok	Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table sizered hat · red hat amq broker 7 · CWE-1035 Kimlik doğrulamasız Hizmet dışı bırakma	Orta5,3	—	%0,4	18 Eyl 2026

CVE-2026-93558
30İzleyin
Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Hizmet dışı bırakma
red hat · red hat amq broker 718 Eyl 2026
CVE-2026-93564
30İzleyin
Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881)
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Hizmet dışı bırakma
red hat · red hat amq broker 718 Eyl 2026
CVE-2026-93565
30İzleyin
Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byte
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
red hat · red hat amq broker 718 Eyl 2026
CVE-2026-93494
30İzleyin
Io.netty/netty-codec-stomp: netty: bytebuf leak in stompsubframedecoder when a frame body is never terminated
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
red hat · red hat build of apache camel for spring boot 418 Eyl 2026
CVE-2026-93560
30İzleyin
Io.netty/netty-codec-stomp: netty: stomp codec content-length long-to-int truncation causes infinite decode loop dos
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
red hat · red hat build of apache camel for spring boot 418 Eyl 2026
CVE-2026-93575
30İzleyin
Io.netty/netty-codec-mqtt: netty: resource exhaustion in mqttdecoder
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
red hat · red hat amq broker 718 Eyl 2026
CVE-2026-93563
30İzleyin
Io.netty/netty-codec-smtp: netty: unbounded multi-line response accumulation in smtpresponsedecoder leads to memory-exhaustion dos
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
red hat · red hat build of apache camel for spring boot 418 Eyl 2026
CVE-2026-93579
26İzleyin
Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)
OrtaCVSS 6,5İstismar yokEPSS %1
- Kimlik doğrulamasız
red hat · red hat amq broker 718 Eyl 2026
CVE-2026-93566
26İzleyin
Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size line
OrtaCVSS 6,5İstismar yokEPSS %0
- Kimlik doğrulamasız
red hat · red hat amq broker 718 Eyl 2026
CVE-2026-93562
26İzleyin
Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling
OrtaCVSS 6,5İstismar yokEPSS %0
- Kimlik doğrulamasız
red hat · red hat amq broker 718 Eyl 2026
CVE-2026-93561
26İzleyin
Io.netty/netty-codec-memcache: netty: memcache binary codec signed/unsigned type mismatch causes frame desynchronization and response smuggling
OrtaCVSS 6,5İstismar yokEPSS %0
- Kimlik doğrulamasız
red hat · red hat build of apache camel for spring boot 418 Eyl 2026
CVE-2026-93578
23İzleyin
Io.netty/netty-handler-ssl-ocsp: netty: missing extended key usage (eku) check in ocsp client allows certificate revocation bypass
OrtaCVSS 5,9İstismar yokEPSS %0
- Kimlik doğrulamasız
red hat · red hat build of apache camel for spring boot 418 Eyl 2026
CVE-2026-93492
21İzleyin
Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
red hat · red hat amq broker 718 Eyl 2026

Tüm zafiyet sınıfları