CVE-2019-10172

CVE-2019-10172 https://vulners.com/cve/CVE-2019-10172 There is no known non-vulnerable version of this component/package. It is recommended to investigate alternative components or a potential mitigating control. Mitigation 1. Desirable Try to switch from usage of com.codehaus.jackson to...

CLEANSTART-2026-CB62266 By design, the JDBCAppender in Log4j 1

Security vulnerability affects the apache-hive package. By design, the JDBCAppender in Log4j 1...

CLEANSTART-2026-EJ90650 Included in Log4j 1

Security vulnerability affects the apache-hive package. Included in Log4j 1...

CLEANSTART-2026-FS95827 JMSAppender in Log4j 1

Security vulnerability affects the apache-hive package. JMSAppender in Log4j 1...

CLEANSTART-2026-RP42469 Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1

CVE-2026-34479 affects multiple packages. The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1. See references for individual vulnerability details...

CLEANSTART-2026-YN29187 In Eclipse Jetty, the HTTP/1

Security vulnerability affects the apache-hive package. In Eclipse Jetty, the HTTP/1...

CLEANSTART-2026-WC12371 undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1

CVE-2026-15157 affects multiple packages. undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1. See references for individual vulnerability details...

CLEANSTART-2026-NO71028 vulnerability occurs when a client sends HTTP/1

Security vulnerability affects the elasticsearch package. The vulnerability occurs when a client sends HTTP/1...

CLEANSTART-2026-NX44968 jsoup through 1

Security vulnerability affects the elasticsearch package. jsoup through 1...

CLEANSTART-2026-RP24727 In Eclipse Jetty, a first HTTP/1

Security vulnerability affects the trino package. In Eclipse Jetty, a first HTTP/1...

CLEANSTART-2026-AF46685 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

CVE-2026-10050 affects multiple packages. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. See references for individual vulnerability details...

Wireshark 1.8.x < 1.8.6 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.6. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.6 advisory. - The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragme...

CVE-2026-94439: Inconsistent Interpretation of HTTP Requests

When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server...

CVE-2026-94439: Inconsistent Interpretation of HTTP Requests

When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server...

PT-2026-108309

Name of the Vulnerable Software and Affected Versions Go affected versions not specified Description When http.Transport sends an HTTP/1 CONNECT request containing a non-empty Request.Body, the body is written directly to the connection without framing following the request headers. If the server...

CVE-2026-104634: Incorrect Type Conversion or Cast

Incorrect Type Conversion or Cast vulnerability in BeamMCP.Server in ScriptKittyOS beammcp allows an MCP client's JSON true, false and null tool arguments to reach the host's dispatch function as the strings "true", "false" and "nil". After BeamMCP.Schema.validate/2 accepted a value as a boolean,...

PT-2026-108315

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An HTTP server handler improperly continues to read and serve requests from a connection after sending a 2xx response to an HTTP/1 CONNECT request without...

EulerOS 2.0 SP15 : shim (EulerOS-SA-2026-3951)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitivex000D element whose content exceeds 2 gigabytes in length may cause a he...

EulerOS 2.0 SP15 : EDK2 (EulerOS-SA-2026-3894)

According to the versions of the EDK2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitivex000D element whose content exceeds 2 gigabytes in length may cause a he...

EulerOS 2.0 SP15 : shim (EulerOS-SA-2026-4017)

According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitivex000D element whose content exceeds 2 gigabytes in length may cause a...