Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

redhat Openshift Service MeshEnvoy vulnerable to HTTP/2 memory exhaustion via cookie header size bypass and HPACK amplification

Risk 46
Severity
7.5
First published (updated )
CVE-2026-47774

redhat Openshift Service MeshEnvoyproxy: openshift service mesh envoy http header sanitization bypass leading to dos and unauthorized access

Risk 48
Severity
7.1
First published (updated )
CVE-2025-0752

Microsoft Windows 10- Rapid Reset HTTP/2 vulnerability

Risk 65
Severity
7.5
Exploited
Zeroday
First published (updated )
CVE-2023-44487

redhat/kiali/kiali-operatorIf you create a kiali instance, then you can specify any project in yaml and it will be installed th…

Risk 81
Severity
8.8
First published (updated )
CVE-2021-3495

go/github.com/kiali/kialiA vulnerability was found in Kiali v1.9 where the default signing key for JWT cookies is known in th…

Risk 66
Severity
8.6
First published (updated )
CVE-2020-1764
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat Openshift Service MeshAn insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShif…

Risk 69
Severity
7.8
First published (updated )
CVE-2020-1704

redhat/envoyCNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipe…

Risk 43
Severity
7.5
First published (updated )
CVE-2020-8661

redhat/envoyCNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or…

Risk 43
Severity
7.5
First published (updated )
CVE-2020-8659

redhat/istioA flaw was found in Istio in all versions released after 1.3 (included). The flaw is in Istio's Auth…

Risk 52
Severity
7.5
First published (updated )
CVE-2020-8595

Nodejs Node.jsSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service

Risk 46
Severity
7.8
First published (updated )
CVE-2019-9511
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nodejs Node.jsSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service

Risk 46
Severity
7.8
First published (updated )
CVE-2019-9517

Nodejs Node.jsSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service

Risk 46
Severity
7.8
First published (updated )
CVE-2019-9518

F5 Big-ip Local Traffic ManagerSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service

Risk 46
Severity
7.8
First published (updated )
CVE-2019-9515

F5 Big-ip Local Traffic ManagerSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service

Risk 47
Severity
7.8
First published (updated )
CVE-2019-9514

Nodejs Node.jsSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service

Risk 46
Severity
7.8
First published (updated )
CVE-2019-9513
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Envoyproxy EnvoyWhen parsing HTTP/1.x header values, Envoy 1.9.0 and before does not reject embedded zero characters…

Risk 57
Severity
8.3
First published (updated )
CVE-2019-9900

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203