CVE-2021-28165

< 9.10

In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a

7.5HIGH

CVE-2021-28164

>= 9.6

In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %

5.3MEDIUM

CVE-2021-28163

>= 9.6

In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is

2.7LOW

CVE-2020-13954

>= 9.6

By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage i

6.1MEDIUM

CVE-2020-11868

>= 7.2

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a se

7.5HIGH

CVE-2019-11815

>= 7.2

An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading

8.1HIGH

CVE-2018-20836

>= 7.2

An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in d

8.1HIGH

CVE-2019-3900

>= 7.2

An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incom

7.7HIGH

CVE-2019-3882

>= 7.2

A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If

5.5MEDIUM

CVE-2019-11486

all versions

The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0.8 has multiple race conditions.

7.0HIGH

CVE-2019-10247

>= 9.6

In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jett

5.3MEDIUM

CVE-2019-10246

>= 9.6

In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualifie

5.3MEDIUM

CVE-2019-3901

>= 7.2

A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in

4.7MEDIUM

CVE-2018-2973

>= 9.7

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affec

5.9MEDIUM

CVE-2018-2964

>= 9.7

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java

8.3HIGH

CVE-2018-2952

>= 9.7

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported version

3.7LOW

CVE-2018-2942

>= 9.7

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL). Supported versions that are affected are Jav

8.3HIGH

CVE-2018-2941

>= 9.7

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE:

8.3HIGH

CVE-2018-2940

>= 9.7

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are

4.3MEDIUM

CVE-2018-2938

>= 9.7

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported versions that are affected are Java SE

9.0CRITICAL

CVE-2018-2638

>= 7.2

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java

8.3HIGH

CVE-2018-2627

>= 7.2

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Supported versions that are affected are Java

7.5HIGH

CVE-2018-2581

>= 7.2

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE:

4.7MEDIUM

CVE-2017-15906

>= 6.0 and <= 6.2

The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, whic

5.3MEDIUM

CVE-2017-10388

>= 7.2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are

7.5HIGH

CVE-2017-10357

>= 7.2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that

5.3MEDIUM

CVE-2017-10356

>= 7.2

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions t

6.2MEDIUM

CVE-2017-10355

>= 7.2

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions

5.3MEDIUM

CVE-2017-10350

>= 7.2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are aff

5.3MEDIUM

CVE-2017-10349

>= 7.2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affec

5.3MEDIUM

CVE-2017-10348

>= 7.2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are

5.3MEDIUM

CVE-2017-10347

>= 7.2

Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affec

5.3MEDIUM

CVE-2017-10346

>= 7.2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are af

9.6CRITICAL

CVE-2017-10345

>= 7.2

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versi

3.1LOW

CVE-2017-10309

>= 7.2

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java

7.1HIGH

CVE-2017-10295

>= 7.2

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions

4.0MEDIUM

CVE-2017-10293

>= 7.2

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE

6.1MEDIUM

CVE-2017-10285

>= 7.2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affect

9.6CRITICAL

CVE-2017-10281

>= 7.2

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versi

5.3MEDIUM

CVE-2017-10274

>= 7.2

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are J

6.8MEDIUM

CVE-2017-10243

>= 7.2

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions tha

6.5MEDIUM

CVE-2017-10198

>= 7.2

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions t

6.8MEDIUM

CVE-2017-10193

>= 7.2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are a

3.1LOW

CVE-2017-10176

>= 7.2

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions t

7.5HIGH

CVE-2017-10135

>= 7.2

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that a

5.9MEDIUM

CVE-2017-10125

>= 7.2

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java

7.1HIGH

CVE-2017-10118

>= 7.2

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that a

7.5HIGH

CVE-2017-10116

>= 7.2

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions t

8.3HIGH

CVE-2017-10115

>= 7.2

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that a

7.5HIGH

CVE-2017-10114

>= 7.2

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE:

8.3HIGH

CVE-2017-10111

>= 7.2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that i

9.6CRITICAL

CVE-2017-10110

>= 7.2

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u

9.6CRITICAL

CVE-2017-10109

>= 7.2

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versi

5.3MEDIUM

CVE-2017-10108

>= 7.2

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versi

5.3MEDIUM

CVE-2017-10107

>= 7.2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affect

9.6CRITICAL

CVE-2017-10105

>= 7.2

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java

4.3MEDIUM

CVE-2017-10102

>= 7.2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affect

9.0CRITICAL

CVE-2017-10101

>= 7.2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affec

9.6CRITICAL

CVE-2017-10096

>= 7.2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affec

9.6CRITICAL

CVE-2017-10090

>= 7.2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are

9.6CRITICAL

CVE-2017-10089

>= 7.2

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE

9.6CRITICAL

CVE-2017-10087

>= 7.2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are

9.6CRITICAL

CVE-2017-10086

>= 7.2

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE:

9.6CRITICAL

CVE-2017-10081

>= 7.2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are af

4.3MEDIUM

CVE-2017-10078

>= 7.2

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported version that is affected is Java

8.1HIGH

CVE-2017-10074

>= 7.2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are af

8.3HIGH

CVE-2017-10067

>= 7.2

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java S

7.5HIGH

CVE-2016-9841

>= 7.2

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmet

9.8CRITICAL

CVE-2016-3427

>= 7.2

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attack

9.8CRITICAL