CWE archive

CWE-173 CVEs

Programmatic archive

4 CVEs tagged with CWE-173 — 0 Critical, 1 High, 0 Medium, 3 Low, 0 Unrated.

See this archive with more filters View CWE evidence profile Explore MITRE CWE definition

CVE-2026-10050

Published Aug 4, 2026

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did…

CVSS 8.7 · High

evidence mentions: 2
Buzz score: 17.5

Vendor/product tagsBeta · best-effort

CVE-2024-54158

Published Dec 4, 2024

In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding

CVSS 3.5 · Low

Vendor/product tagsBeta · best-effort

CVE-2023-26303

Published Feb 23, 2023

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.

CVSS 3.3 · Low

Vendor/product tagsBeta · best-effort

CVE-2023-26302

Published Feb 22, 2023

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input.

CVSS 3.3 · Low

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1