SUSE CVE-2013-10075

Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DBFile will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted...

CVE-2026-33844

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...

Unity Linux 20.1060e / 20.1070e Security Update: tomcat (UTSA-2026-017355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017355 advisory. The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56...

[SECURITY] Fedora 43 Update: proftpd-1.3.9a-1.fc43

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

GHSA-VF5J-865M-MQ7C vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi...

CVE-2026-42778 vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi...

GHSA-995C-6RP3-4M4X vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi...

CVE-2026-42779 vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi...

Exploit for Observable Timing Discrepancy in Apache Http_Server

CTT-enhanced-Apache-modauthdigest-timing-attack-exploit CTT-...

GHSA-2J9M-25XV-MP6R Apache NiFi is missing the Restricted annotation with the Execute Code Required Permission

The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...

EUVD-2026-28593

The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...

CVE-2026-39816

The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...

CVE-2026-39816 Apache NiFi: Missing Execute Code Required Permission on TinkerpopClientService

The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...

GHSA-VF5J-865M-MQ7C vulnerabilities

Vulnerabilities for packages: apache-nifi, apache-hop, jenkins, guacamole-client, apache-hop-fips...

GHSA-RGRR-P7GP-5XJ7 vulnerabilities

Vulnerabilities for packages: tinkerpop, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1, hadoop-fips, seata, trino, tez, thingsboard, pinot-fips, celeborn, pinot, management-api-for-apache-cassandra-5.0, druid, apache-hop, apache-hop-fips...

CVE-2026-42778 vulnerabilities

Vulnerabilities for packages: apache-nifi, apache-hop, jenkins, guacamole-client, apache-hop-fips...

CVE-2026-42586 vulnerabilities

Vulnerabilities for packages: tinkerpop, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1, hadoop-fips, seata, trino, tez, thingsboard, pinot-fips, celeborn, pinot, management-api-for-apache-cassandra-5.0, druid, apache-hop, apache-hop-fips...

GHSA-995C-6RP3-4M4X vulnerabilities

Vulnerabilities for packages: apache-nifi, apache-hop, jenkins, guacamole-client, apache-hop-fips...

GHSA-2C5C-CHWR-9HQW vulnerabilities

Vulnerabilities for packages: opensearch, camunda, spark, trino, spark-kubernetes-operator-fips, opensearch-fips, spark-kubernetes-operator, druid, apache-hop, camunda-zeebe, apache-hop-fips, spark-fips...

CVE-2026-42582 vulnerabilities

Vulnerabilities for packages: opensearch, camunda, spark, trino, spark-kubernetes-operator-fips, opensearch-fips, spark-kubernetes-operator, druid, apache-hop, camunda-zeebe, apache-hop-fips, spark-fips...