High
CVE-2024-7708
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 30
Reset filters
Medium
CVE-2026-8384
Eclipse Jetty: Path parameter traversal
Medium
CVE-2026-6790
Eclipse Jetty: HTTP Authority/Host mismatch
Medium
CVE-2026-10051
Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections
High
CVE-2026-1605
The Eclipse Jetty Server Artifact has a Gzip request memory leak
High
CVE-2024-13009
**UNSUPPORTED WHEN ASSIGNED** GzipHandler causes part of request body to be seen as request body of a separate request
Medium
CVE-2024-8184
Eclipse Jetty's ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks
Medium
CVE-2023-26048
OutOfMemoryError for large multipart without filename in Eclipse Jetty
Low
CVE-2023-26049
Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookies
High
CVE-2022-2191
Jetty SslConnection does not release pooled ByteBuffers in case of errors
Medium
CVE-2011-4461
Improper Input Validation in Jetty
Medium
CVE-2006-6969
Jetty Uses Predictable Session Identifiers
Low
CVE-2021-34428
SessionListener can prevent a session from being invalidated breaking logout
High
CVE-2021-28165
Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources
Medium
CVE-2020-27223
DOS vulnerability for Quoted Quality CSV headers
Medium
CVE-2020-27218
Buffer not correctly recycled in Gzip Request inflation
Critical
CVE-2019-17638
Operation on a Resource after Expiration or Release in Jetty Server
Medium
CVE-2019-17632
Unescaped exception messages in error responses in Jetty
Medium
CVE-2019-10246
Information Exposure vulnerability in Eclipse Jetty
Medium
CVE-2019-10247
Installation information leak in Eclipse Jetty
Medium
CVE-2019-10241
Cross-site Scripting in Eclipse Jetty
High
CVE-2018-12545
Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-server
High
CVE-2015-2080
Jetty vulnerable to exposure of sensitive information to unauthenticated remote users
Critical
CVE-2017-7658
Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.