| CVE-2026-118636 |
**UNSUPPORTED WHEN ASSIGNED** JavaNativeMessageDecoder in the MINA 3.0 codec module calls…
|
9.8
Critique
|
31 oct. 2026 |
| CVE-2026-94301 |
The fix for CVE-2026-47065/ZDRES-232 ("resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via…
|
9.8
Critique
|
21 sept. 2026 |
| CVE-2026-47321 |
The CompressionFilter class uses ZLib to deflate and inflate data sent and received
|
7.5
Élevée
|
21 sept. 2026 |
| CVE-2026-47065 |
ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy Assessment: Fully…
|
9.8
Critique
|
3 juin 2026 |
| CVE-2026-42778 |
The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches
|
9.8
Critique
|
1 mai 2026 |
| CVE-2026-42779 |
The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches
|
9.8
Critique
|
1 mai 2026 |
| CVE-2026-41409 |
The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incomplete
|
9.8
Critique
|
27 avr. 2026 |
| CVE-2026-41635 |
Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them (for static classes or primitive types)…
|
9.8
Critique
|
27 avr. 2026 |
| CVE-2024-52046 |
The ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to process incoming serialized…
|
10.0
Critique
|
25 déc. 2024 |
| CVE-2021-41973 |
In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely
|
Non notée
|
1 nov. 2021 |
| CVE-2019-0231 |
Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the…
|
Non notée
|
1 oct. 2019 |