63794 matches found
CVE-2026-48203
A flaw was found in the Apache Camel Solr component. A remote unauthenticated attacker can inject Solr query parameters and document fields into requests by utilizing specific header prefixes SolrParam. and SolrField. that bypass the HTTP header filter. This improper input validation allows for...
CVE-2026-49099
A flaw was found in Apache Camel Salesforce. Due to improper neutralization of special elements, non-Camel-prefixed HTTP headers are not filtered, allowing them to pass from an inbound HTTP request. A remote, unauthenticated attacker can exploit this by injecting malicious headers to override...
CVE-2026-46456
A flaw was found in Apache Camel AWS2-SQS Component. This vulnerability allows a remote attacker, with permissions to send messages to a consumed SQS queue, to inject arbitrary Camel control headers into the message exchange. This is due to a missing inbound header filter strategy. The injected...
CVE-2026-46457
A flaw was found in Apache Camel NATS component. Due to improper input validation, a client capable of publishing to a NATS subject can inject arbitrary Camel control headers into the Camel Exchange. These injected headers can then influence the behavior of downstream producers in the route,...
Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems
Summary The default .htaccess shipped with Grav and the reference webserver-configs/htaccess.txt contains security rules that block direct HTTP access to sensitive file types .yaml, .yml, .php, .json, .twig, etc. under user/ and system/vendor/ directories. However, these rules lack the NC No Case...
CVE-2026-62673
Grav (file-based web platform) prior to 2.0.4 contains a case-sensitivity flaw in its default .htaccess and webserver-configs/htaccess.txt. Three Apache RewriteRule directives that block access to sensitive file types (.yaml, .php, .json, etc.) under user/ and system/vendor/ omit the [NC] flag, m...
CVE-2020-10204
creationtimestamp| type| source ---|---|--- 2026-08-19 15:00:17+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-10204.yaml 2026-08-20 00:00:17+00:00| confirmed|...
MINI-MGWH-PV97-W83H
Bulletin has no description...
Exploit for Path Traversal in Apache Http_Server
No d...
CVE-2026-66273
A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit a vulnerability in how the software handles type sizes and counts. This could lead to excessive memory allocation, causing the system to become unresponsive and resulting in a denial of...
CVE-2026-66257
A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit an issue with unbounded symbol value caching. This could lead to resource exhaustion, where the system runs out of available resources, ultimately causing a denial of service DoS. A denial ...
RHSA-2026:55992 Red Hat Security Advisory: mod_http2 security update
Bulletin has no description...
Vulnerabilities found in Oracle Financial Services
Oracle has identified vulnerabilities in various Financial Services Enterprise modules. These vulnerabilities exist in third-party products such as Apache Kafka, Log4j, and the Spring Framework. Updates have been released by the developers for these products. These updates are now integrated into...
GHSA-2QJ4-MMR9-4V2F vulnerabilities
Vulnerabilities for packages: apache-hop-fips, management-api-for-apache-cassandra-4.1, seata, thingsboard, hadoop-fips, tez, pinot-fips, celeborn, pinot, management-api-for-apache-cassandra-5.0, trino...
CVE-2026-59902 vulnerabilities
Vulnerabilities for packages: apache-hop-fips, management-api-for-apache-cassandra-4.1, seata, thingsboard, hadoop-fips, tez, pinot-fips, celeborn, pinot, management-api-for-apache-cassandra-5.0, trino...
GHSA-2QJ4-MMR9-4V2F vulnerabilities
Vulnerabilities for packages: celeborn, tez, management-api-for-apache-cassandra-5.0, trino, thingsboard...
CVE-2026-59902 vulnerabilities
Vulnerabilities for packages: celeborn, tez, management-api-for-apache-cassandra-5.0, trino, thingsboard...
GHSA-8C42-7QJ2-3J46 vulnerabilities
Vulnerabilities for packages: neo4j, zipkin, trino, apache-activemq-artemis, infinispan, wavefront-proxy, apicurio-registry, tez, druid, opensearch, management-api-for-apache-cassandra-5.0, thingsboard, wildfly, akhq, keycloak, apache-pulsar...
CVE-2026-59903 vulnerabilities
Vulnerabilities for packages: neo4j, zipkin, trino, apache-activemq-artemis, infinispan, wavefront-proxy, apicurio-registry, tez, druid, opensearch, management-api-for-apache-cassandra-5.0, thingsboard, wildfly, akhq, keycloak, apache-pulsar...