Vendors / Apple Records 9537 All Threatist records
Exploited (KEV) 107
CVSS critical 1131
CVSS high 3512
Exploited now Apple records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority HIGH 75
Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.87286 · Published 2019-08-13 · Partial fix CWE-400
Priority HIGH 74
Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.82813 · Published 2019-08-13 · Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400
Priority HIGH 74
Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.83433 · Published 2019-08-13 · Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400
Priority HIGH 73
Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.81556 · Published 2019-08-13 · Partial fix CWE-400
Priority HIGH 67
Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.59547 · Published 2019-08-13 · Partial fix CWE-400
Priority MEDIUM 62
Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.57461 · Published 2019-08-13 · Partial fix CWE-400
Priority MEDIUM 55
Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.27004 · Published 2019-08-13 · Partial fix CWE-400
Priority MEDIUM 54
Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.25448 · Published 2019-08-13 · Partial fix CWE-400
Priority MEDIUM 44
In SwiftNIO before 1.8.0, a buffer overflow was addressed with improved size validation.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0101 · Published 2019-01-11 · No fix listed CWE-119
Priority MEDIUM 40
NIOHTTP1 and projects using it for generating HTTP responses can be subject to a HTTP Response Injection attack.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00664 · Published 2022-09-28 · Fixed in 2.42.0, 2.39.1 +1 CWE-113
Priority LOW 30
An unauthenticated remote peer can crash any NIOWebSocket-based server (including Vapor and Hummingbird) with a single 11-byte frame sent after a completed WebSocket handshake, dropping all active connections until the p…
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00374 · Published 2026-08-20 · Fixed in 2.101.0 CWE-20
Open these records in search → All records by CVSS severity
1131 3512 4309 581 4
THREATIST.IORead the docs