WaratekVRT Sign in
Reset
More filters (1)
Columns
Product netty✕
Overview 105 matches · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
105matches 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 105 100.0%
Critical 11 10.5% High 52 49.5% Medium 40 38.1% Low 2 1.9% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 105 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 31 29.5% Forecast only 0 0.0% No public exploit 74 70.5%
split by peak 70 / year
No exploit published: 105 Low: 2Medium: 40High: 52Critical: 11 not blocked: 105 No public exploit: 74Proof of concept only: 31
20141 No exploit published1 Medium1 not blocked1 No public exploit1 20150 20160 20172 No exploit published2 High2 not blocked2 No public exploit2 20180 20192 No exploit published2 High2 not blocked2 No public exploit2 20207 No exploit published7 Critical3 High2 Medium2 not blocked7 No public exploit7 20212 No exploit published2 Medium2 not blocked2 No public exploit2 20224 No exploit published4 High1 Medium3 not blocked4 Proof of concept only3 No public exploit1 20234 No exploit published4 High3 Medium1 not blocked4 No public exploit4 20246 No exploit published6 Critical1 High2 Medium3 not blocked6 Proof of concept only2 No public exploit4 20257 No exploit published7 High1 Medium5 Low1 not blocked7 Proof of concept only4 No public exploit3 202670 No exploit published70 Critical7 High39 Medium23 Low1 not blocked70 Proof of concept only22 No public exploit48
2014201620182020202220242026
105 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2019-11284 High 2019-10-17 No exploit published No public exploit Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may gain access to credentials for a different server than they have access to.
CVE-2019-16869 High 2019-09-26 No exploit published No public exploit Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.
CVE-2015-2156 High 2017-10-18 No exploit published No public exploit Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters.
CVE-2016-4970 High 2017-04-13 No exploit published No public exploit handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).
CVE-2014-0193 Medium 2014-05-06 No exploit published No public exploit WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames.
‹ prev page 2 of 2 next ›