كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 5 من 5

• منخفضةCVE-2026-76816درجة CVSS 3.524‏/08‏/2026

  Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final, MqttEncoder does not validate client identifiers, will topics, usernames, and PUBLISH topic names before encoding, allowing prohibited null

  CWE-20CWE-626
• عاليةCVE-2026-62380درجة CVSS 7.522‏/08‏/2026

  Netty (io.netty:netty-codec-socks) versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain null byte, CRLF, and credential injection vulnerabilities in the SOCKS4 (Socks4ClientEncoder) and SOCKS5 (Socks5ClientEncoder) client encoders,

  CWE-626netty netty
• عاليةCVE-2026-42579درجة CVSS 7.513‏/05‏/2026

  Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encoding or decoding. This creates a bidirectional attack surface:

  CWE-20CWE-400CWE-626netty netty
• عاليةCVE-2026-42010درجة CVSS 7.107‏/05‏/2026

  A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username,

  CWE-170CWE-626gnu gnutlsredhat hardened_imagesredhat openshift_container_platform
• منخفضةCVE-2026-42040درجة CVSS 3.724‏/04‏/2026

  Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the encode() function in lib/helpers/AxiosURLSearchParams.js contains a character mapping (charMap) at line 21 that reverses the safe percent-encoding of null bytes.

  CWE-116CWE-626axios axios