CWE-173

6 CVEs classified under CWE-173. Browse by severity and year.

Top CVEs for CWE-173
CVESeverityScorePublishedSummary
CVE-2026-10050Critical9.12026-08-04In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specifi…
CVE-2026-19611High7.42026-08-20A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equi…
CVE-2024-54158Low3.52024-12-04In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding
CVE-2023-26303Low3.32023-02-23Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.
CVE-2023-26302Low3.32023-02-22Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as…
CVE-2026-816382026-09-07Improper Handling of Alternate Encoding vulnerability in ash-project ash_double_entry allows an attacker to submit several distinct string spellings of the sam…
All CVEs classified under CWE-173 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-816382026-09-07Improper Handling of Alternate Encoding vulnerability in ash-project ash_double_entry allows an attacker to submit several distinct string spellings of the sam…
CVE-2026-19611High7.42026-08-20A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equi…
CVE-2026-10050Critical9.12026-08-04In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specifi…
CVE-2024-54158Low3.52024-12-04In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding
CVE-2023-26303Low3.32023-02-23Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.
CVE-2023-26302Low3.32023-02-22Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as…