EUVD-2013-7294

Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DBFile will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted...

CVE-2013-10075

Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DBFile will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted...

CVE-2013-10075

Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DBFile will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted...

CVE-2013-10075 Apache::Session versions through 1.94 for Perl re-creates deleted sessions

Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DBFile will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted...

CVE-2013-10075 Apache::Session versions through 1.94 for Perl re-creates deleted sessions

Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DBFile will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted...

CVE-2013-10075

The connected EUVD-2013-7294 entry confirms a vulnerability in Apache::Session for Perl (versions up to 1.94). The issue arises when re-creating deleted sessions via the File and DB_File stores, allowing a session that should have been deleted to be revived and potentially reusing data intended f...

GHSA-WG35-8JPF-2XV3 vulnerabilities

Vulnerabilities for packages: conductor-fips, kafbat-ui, conductor, camunda, kafbat-ui-fips, thingsboard, nacos, camunda-zeebe, nacos-docker, apache-activemq, apache-nifi-registry, apache-activemq-fips...

CVE-2026-22741 vulnerabilities

Vulnerabilities for packages: conductor-fips, kafbat-ui, conductor, camunda, kafbat-ui-fips, thingsboard, nacos, camunda-zeebe, nacos-docker, apache-activemq, apache-nifi-registry, apache-activemq-fips...

GHSA-6P4F-WCWH-5VVM vulnerabilities

Vulnerabilities for packages: conductor-fips, kafbat-ui, conductor, camunda, kafbat-ui-fips, thingsboard, nacos, camunda-zeebe, nacos-docker, apache-activemq, apache-nifi-registry, apache-activemq-fips...

CVE-2026-22745 vulnerabilities

Vulnerabilities for packages: conductor-fips, kafbat-ui, conductor, camunda, kafbat-ui-fips, thingsboard, nacos, camunda-zeebe, nacos-docker, apache-activemq, apache-nifi-registry, apache-activemq-fips...

BIT-JRE-2022-34169 Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

Exploit for Improper Input Validation in Apache Activemq

CVE-2026-34197 — Apache ActiveMQ Classic Jolokia RCE Lab O...

Exploit for Double Free in Apache Http_Server

CVE-2026-23918 "Apache HTTP/2 Double-Free" — Detection & Respo...

EUVD-2026-28451

Improper input validation in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...

EUVD-2026-28448

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...

Apache::Session::Generate::MD5 安全漏洞

Apache::Session::Generate::MD5 is a session management module provided by the Apache Foundation. Versions of Apache::Session::Generate::MD5 prior to 1.94 contained security vulnerabilities. These vulnerabilities stemmed from the recreation of deleted sessions, which could lead to the restoration ...

📄 Apache Airflow Databricks Provider Certificate Verification Bypass

The Apache Airflow Databricks Provider package disables TLS certificate verification when communicating with the Kubernetes API server during federated token exchange. Both the synchronous and asynchronous code paths use verify=False / ssl=False, allowing any attacker with network access within t...

Apache NiFi 安全漏洞

Apache NiFi is a data processing and distribution system developed by the Apache Foundation in the United States. This system is primarily used for data routing, transformation, and intermediate logic within the system. Vulnerabilities exist in versions 2.8.0 of Apache NiFi, as the optional...

Apache CloudStack 代码注入漏洞

Apache CloudStack is an IaaS cloud computing platform developed by the Apache Foundation in the United States. This platform is primarily used for deploying and managing large-scale virtual machine networks. Apache CloudStack has a code injection vulnerability, which stems from a lack of filename...

Linux Distros Unpatched Vulnerability : CVE-2013-10075

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DBFile...