Lucene search
+L

169692 matches found

NVD
NVD
added 2026/08/05 6:16 a.m.16 views

CVE-2026-68074

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue...

7.5CVSS0.00493EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/05 6:16 a.m.16 views

CVE-2026-67589

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

7.5CVSS0.00493EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/05 6:16 a.m.15 views

CVE-2026-66257

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...

7.5CVSS0.00426EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/05 6:16 a.m.16 views

CVE-2026-66273

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...

7.5CVSS0.00426EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/05 6:16 a.m.8 views

UBUNTU-CVE-2026-67588

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

7.5CVSS5.4AI score0.00483EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/05 6:16 a.m.17 views

CVE-2026-67589

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

7.5CVSS5.2AI score0.00493EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/05 6:16 a.m.9 views

UBUNTU-CVE-2026-67589

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

7.5CVSS5.4AI score0.00493EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/05 6:16 a.m.18 views

CVE-2026-67588

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

7.5CVSS5.2AI score0.00483EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/05 6:00 a.m.9 views

EUVD-2026-53119

The WP 2FA WordPress plugin before 4.1.0 does not validate the second authentication factor when one of its supported methods is selected at login, allowing an attacker who already knows a user's password to bypass two-factor authentication and fully access the account, including administrator...

7.5CVSS5.5AI score0.00364EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/05 6:00 a.m.66 views

CVE-2026-15372

The CVE describes a vulnerability in the WP 2FA WordPress plugin (pre-4.1.0) where the second authentication factor is not validated when a supported method is chosen at login. This allows an attacker who already has the user’s password to bypass 2FA and fully access the account, including admini...

7.5CVSS5.5AI score0.00364EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/05 6:00 a.m.51 views

CVE-2026-17515

The MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings WordPress plugin (affected: before 7.0.4) exposes an AJAX action with missing authorization and CSRF checks. This allows any authenticated user (e.g., a subscriber) to read the plugin’s import log file and import-related metadata ass...

4.3CVSS5.7AI score0.00112EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/05 6:00 a.m.37 views

CVE-2026-16055 Contest Gallery < 30.0.7 - Unauthenticated Login-Protection and 2FA Bypass via post_cg_login

The Contest Gallery WordPress plugin before 30.0.7 does not route its front-end login through the standard WordPress authentication flow, issuing an authentication cookie directly after the password check, which bypasses installed brute-force-protection and two-factor-authentication Contest Galle...

0.00304EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/05 6:00 a.m.9 views

EUVD-2026-53117

The OTP Login With Phone Number, OTP Verification WordPress plugin before 1.8.71 does not limit the number of OTP verification attempts or invalidate a one-time login code after a wrong guess, and an unauthenticated user can request a login code for any account. Because the code is a short numeri...

9.1CVSS5.6AI score0.00296EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/05 6:00 a.m.10 views

EUVD-2026-53121

The Contest Gallery WordPress plugin before 30.0.7 does not route its front-end login through the standard WordPress authentication flow, issuing an authentication cookie directly after the password check, which bypasses installed brute-force-protection and two-factor-authentication Contest Galle...

7.5CVSS5.5AI score0.00304EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/05 5:51 a.m.45 views

CVE-2026-68080

CVE-2026-68080 affects Apache Qpid Broker-J up to version 10.0.1. The issue is an unbounded rate of responses to echo flows, allowing an authenticated attacker to cause excessive resource usage and potential denial of service. The recommended mitigation is upgrading to version 10.1.0, which fixes...

6.5CVSS5.4AI score0.00421EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/08/05 5:44 a.m.9 views

EUVD-2026-53096

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2....

7.5CVSS5.4AI score0.00478EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/05 5:41 a.m.64 views

CVE-2026-67554

CVE-2026-67554 affects Apache Qpid Proton-Dotnet up to version 1.0.0. An authenticated attacker can craft a disposition frame with large or illegal ranges due to naive range handling, causing excessive CPU usage and leading to denial of service. Product: Apache Qpid Proton-Dotnet (affected); Root...

6.5CVSS5.5AI score0.00413EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/08/05 5:33 a.m.49 views

CVE-2026-67590

CVE-2026-67590 affects Apache Qpid ProtonJ2 (versions up to 1.1.0). The issue is an unbounded type nesting that can be triggered pre-authentication, causing a StackOverflowError and potential denial of service. A fix is available in version 1.2.0. No exploitation details are provided in the sourc...

7.5CVSS5.4AI score0.00493EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/08/05 5:33 a.m.40 views

CVE-2026-67590 Apache Qpid ProtonJ2: Unbounded type nesting can lead to pre-authentication stackoverflow

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

0.00493EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/05 5:33 a.m.19 views

CVE-2026-67590 Apache Qpid ProtonJ2: Unbounded type nesting can lead to pre-authentication stackoverflow

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

7.5CVSS5.3AI score
SaveExploits0References5
Rows per page
Query Builder