ROS-20260727-73-0022

A vulnerability in the modlda module of the Apache HTTP Server is related to a use-after-free condition. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service...

ROS-20260727-73-0021

A vulnerability in the modheaders and modmime modules of the Apache HTTP Server is related to out-of-bounds memory reads. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality and integrity of protected information...

ROS-20260727-73-0027

A vulnerability in the Apache HTTP Server's OCSP protocol implementation is related to out-of-bounds memory access. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260727-73-0026

A vulnerability in the modxml2enc module of the Apache HTTP Server is related to a buffer overflow in dynamic memory. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260727-73-0011

A vulnerability in apache-activemq related to uncontrolled resource consumption. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260727-73-0030

A vulnerability in the Apache HTTP Server's modproxyhtml module is related to a dynamic memory buffer overflow. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

PT-2026-64885

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description An integer overflow or wraparound issue exists in the C++, c glib, Go, netstd, Delphi, and Haxe bindings. The flaw is located in the checkReadBytesAvailable function of the TProtocol class...

PT-2026-64877

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Improper handling of highly compressed data, known as data amplification, exists in the Apache Thrift Python bindings. This issue occurs during unbounded Zlib decompression within the...

PT-2026-64884

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Inefficient Algorithmic Complexity and Allocation of Resources Without Limits or Throttling in Apache Thrift Node.js bindings. This issue can lead to a quadratic-time Denial of Service DoS in...

PT-2026-64892

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description An out-of-bounds read issue exists in the Apache Thrift C++ bindings due to improper validation of the specified quantity in the input. This occurs within the readString function of the...

macOS 26.x < 26.6 Multiple Vulnerabilities (128067)

The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.6. It is, therefore, affected by multiple vulnerabilities: - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6,...

PT-2026-64881

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Improper validation of certificates with host mismatch occurs in the Apache Thrift C++ bindings. This issue involves a wildcard bypass in the matchName function of the TSSLSocket class, failin...

PT-2026-64890

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description An out-of-bounds read issue exists in the Apache Thrift c glib bindings, specifically occurring within the transport leftover-bytes path. An out-of-bounds read is a condition where a program...

PT-2026-64891

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description An allocation of resources without limits or throttling issue exists in the Apache Thrift Rust bindings. Specifically, the Rust binary protocol non-strict path lacks a string size limit, which...

PT-2026-64880

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Improper validation of certificates with host mismatch occurs in the Apache Thrift c glib bindings. This issue results in the TLS client failing to perform necessary hostname verification...

PT-2026-64893

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Apache Thrift Python bindings contain an issue where certificates with host mismatches are not properly validated. Recommendations Upgrade to version 0.24.0...

ROS-20260727-73-0013

A vulnerability in apache-activemq related to a failure to implement measures to protect the structure of a web page. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...

ROS-20260727-73-0025

A vulnerability in the Apache HTTP Server's modproxyftp module is related to an infinite loop with no exit condition. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260727-73-0028

A vulnerability in the modhttp2 module of the Apache HTTP Server is related to a use-after-free condition. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260727-73-0029

A vulnerability in the Apache HTTP Server is related to a buffer overflow at the start of the buffer. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...