Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- CriticalHazelcast allows arbitrary member memory access by low-privileged clientEPSS 0.4%Oct 8, 2026
- HighHazelcast has an authorization bypass in IMap Predicates APIEPSS 0.4%Oct 8, 2026
- Medium6.8AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix)EPSS 0.3%Oct 8, 2026
- Medium6.8AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPSEPSS 0.4%Oct 8, 2026
- High7.5AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabledEPSS 0.4%Oct 8, 2026
- High7.4AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy loginsEPSS 0.2%Oct 8, 2026
- UnknownAsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.ukEPSS 0.3%Oct 8, 2026
- High7.7OpenRemote has Cross-Realm User Information Disclosure in UserResourceImplJul 6, 2026
8 records · page 1 of 1
PreviousNext