Java - CVE CyberSecurity Database News (Page 71)

Sep 15, 2023 Java Google eclipse jetty.project

CVE-2023-41900 - Weak Authentication Flaw in Jetty OpenIdAuthenticator

Jetty is a widely used Java-based web server and servlet engine, valued for its speed and flexibility. But in 2023, a significant vulnerability—CVE-2023-41900—was

Sep 15, 2023 Java Apache eclipse jetty.project

CVE-2023-40167 - Jetty HTTP/1 Header Parsing Vulnerability Explained

Jetty is a popular Java-based web server and servlet engine used in millions of applications, both for development and production purposes. In 2023, a subtle

Sep 15, 2023 Java PHP eclipse jetty.project

CVE-2023-36479 - How Jetty's CGI Servlet Bug Lets Hackers Run Rogue Commands

Published: April 2024 What is CVE-2023-36479? CVE-2023-36479 is a serious security flaw discovered in Eclipse Jetty, a widely used open-source Java web server and servlet

CVE-2023-1108 - Denial-of-Service in Undertow via SSL Handshake Infinite Loop

Sep 14, 2023 Java Red Hat Text-Only RHOAR

CVE-2023-1108 - Denial-of-Service in Undertow via SSL Handshake Infinite Loop

A newly discovered vulnerability, CVE-2023-1108, affects the Undertow web server. This server is widely used behind application servers like WildFly and JBoss. This flaw can

Sep 14, 2023 Exploit Java Apache Apache Software Foundation Apache Commons Compress

CVE-2023-42503 - Exploiting Improper Input Validation in Apache Commons Compress (TAR Parsing) for Denial of Service

In late 2023, security researchers identified a Denial of Service (DoS) vulnerability in Apache Commons Compress library, affecting versions between 1.22 through 1.23.