Lucene search
+L

65429 matches found

OSV
OSV
added 2026/08/05 5:18 a.m.25 views

CVE-2026-66257 Apache Qpid Proton-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustion

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...

7.5CVSS5.2AI score
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/05 3:12 a.m.8 views

Important: Red Hat Security Advisory: mod_http2 security update

An update for modhttp2 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

7.5CVSS7.3AI score0.31042EPSS
SaveExploits10References5
RedHat Linux
RedHat Linux
added 2026/08/05 3:12 a.m.5 views

mod_http2: Apache HTTP Server: HTTP/2 DoS by Memory Increase

A flaw was found in Apache HTTP Server. This late release of memory after effective lifetime vulnerability allows a remote, unauthenticated attacker to cause a denial of service DoS. The vulnerability can lead to resource exhaustion, making the server unavailable to legitimate users...

7.5CVSS6.1AI score0.04799EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/08/05 3:12 a.m.7 views

httpd: mod_http2: Apache HTTP Server mod_http2: Use After Free vulnerability allows arbitrary code execution or denial of service.

A flaw was found in the Apache HTTP Server's modhttp2 module. This vulnerability, known as a Use After Free, occurs when the server's file handles are exhausted. An attacker could potentially exploit this to cause a denial of service or, in some cases, execute arbitrary code, leading to system...

7.3CVSS7.4AI score0.00479EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/05 3:12 a.m.5 views

httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime

A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service...

6.5CVSS6.5AI score0.00545EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/05 12:59 a.m.11 views

mod_http2: Apache HTTP Server: HTTP/2 DoS by Memory Increase

A flaw was found in Apache HTTP Server. This late release of memory after effective lifetime vulnerability allows a remote, unauthenticated attacker to cause a denial of service DoS. The vulnerability can lead to resource exhaustion, making the server unavailable to legitimate users...

7.5CVSS6.4AI score0.04799EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/08/05 12:59 a.m.11 views

httpd: mod_http2: Apache HTTP Server mod_http2: Use After Free vulnerability allows arbitrary code execution or denial of service.

A flaw was found in the Apache HTTP Server's modhttp2 module. This vulnerability, known as a Use After Free, occurs when the server's file handles are exhausted. An attacker could potentially exploit this to cause a denial of service or, in some cases, execute arbitrary code, leading to system...

7.3CVSS7.4AI score0.00479EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/05 12:59 a.m.22 views

Important: Red Hat Security Advisory: mod_http2 security update

An update for modhttp2 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

7.5CVSS7.4AI score0.31042EPSS
SaveExploits10References5
RedHat Linux
RedHat Linux
added 2026/08/05 12:59 a.m.12 views

httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime

A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service...

6.5CVSS6.6AI score0.00545EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/08/05 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-67592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage...

7.5CVSS5.3AI score0.00478EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/05 12:00 a.m.7 views

Photon OS 5.0: Apache PHSA-2026-5.0-90-0798

An update of the apache package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0798. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.5CVSS5.4AI score0.00498EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/05 12:00 a.m.8 views

Photon OS 5.0: Apache PHSA-2024-5.0-91-0402

An update of the apache package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0402. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.5CVSS6.9AI score0.04602EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/05 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-67590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid...

7.5CVSS5.3AI score0.00494EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/05 12:00 a.m.7 views

Photon OS 5.0: Apache PHSA-2025-5.0-91-0565

An update of the apache package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0565. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.5CVSS7.3AI score0.02056EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/05 12:00 a.m.10 views

RHEL 10 : mod_http2 (RHSA-2026:50538)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:50538 advisory. The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers. Security Fixes: modhttp2:...

7.5CVSS7.7AI score0.31042EPSS
SaveExploits10References10
Tenable Nessus
Tenable Nessus
added 2026/08/05 12:00 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-67591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affects Apache Qpid ProtonJ...

6.5CVSS5.4AI score0.00422EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/04 2:52 p.m.6 views

CLSA-2026-1783991065 TuxCare security update for org.apache.kafka (2 CVEs)

TuxCare rebuilt 56 org.apache.kafka packages to address 2 CVEs. Fixed in 3.7.1-tuxcare.1...

7.5CVSS6.5AI score0.65905EPSS
SaveExploits2
OSV
OSV
added 2026/08/04 2:52 p.m.5 views

CLSA-2026-1779756518 TuxCare security update for org.apache.commons:commons-compress (2 CVEs)

TuxCare rebuilt org.apache.commons:commons-compress to address 2 CVEs. Fixed in 1.21-tuxcare.1...

8.1CVSS6.2AI score0.00898EPSS
SaveExploits0
OSV
OSV
added 2026/08/04 2:52 p.m.6 views

CLSA-2026-1776991059 TuxCare security update for org.apache.logging.log4j (1 CVE)

TuxCare rebuilt 33 org.apache.logging.log4j packages to address 1 CVE. Fixed in 2.17.2-tuxcare.1...

7.5CVSS6.7AI score0.00535EPSS
SaveExploits1
OSV
OSV
added 2026/08/04 2:52 p.m.5 views

CLSA-2026-1772756024 TuxCare security update for org.apache.thrift (4 CVEs)

TuxCare rebuilt 2 org.apache.thrift packages to address 4 CVEs. Fixed in 0.9.3-tuxcare.2...

9CVSS6.7AI score0.09156EPSS
SaveExploits0
Rows per page
Query Builder