Lucene search
+L

10332 matches found

OSV
OSV
added 2026/06/08 4:16 p.m.9 views

UBUNTU-CVE-2026-34355

A buffer overflow in modproxyhtml in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue...

7.5CVSS5.6AI score0.01118EPSS
SaveExploits0References7
OSV
OSV
added 2026/06/08 4:16 p.m.8 views

UBUNTU-CVE-2026-44186

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in the modproxyftp module in Apache HTTP Server with an attacker controlled backend FTP server. This issue affects undefined: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue...

7.3CVSS5.4AI score0.00583EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/06/08 4:16 p.m.6 views

CVE-2026-34355

A buffer overflow in modproxyhtml in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue...

7.5CVSS7.2AI score0.01118EPSS
SaveExploits0References6
AlpineLinux
AlpineLinux
added 2026/06/08 3:20 p.m.12 views

CVE-2026-34355

A buffer overflow in modproxyhtml in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue...

7.5CVSS5.6AI score0.01118EPSS
SaveExploits0
CVE
CVE
added 2026/06/08 3:20 p.m.109 views

CVE-2026-34355

CVE-2026-34355 : A buffer overflow in Apache HTTP Server’s mod_proxy_html (affecting 2.4.67 and earlier) can be exploited by an untrusted backend. The advisory indicates that upgrading to 2.4.68 fixes the issue. Documented impact is a network‑accessible overflow with high severity (CVSS v3.1: 7.5...

7.5CVSS5.7AI score0.01118EPSS
SaveExploits0References10Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/08 3:20 p.m.22 views

CVE-2026-34355 Apache HTTP Server: mod_proxy_html buffer overflow

A buffer overflow in modproxyhtml in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue...

5.7AI score0.01118EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/08 3:20 p.m.14 views

CVE-2026-34355

A buffer overflow in modproxyhtml in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue...

5.7AI score0.01118EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/06/08 3:11 p.m.12 views

CVE-2026-44186

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in the modproxyftp module in Apache HTTP Server with an attacker controlled backend FTP server. This issue affects undefined: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue...

5.4AI score0.00583EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/06/08 3:11 p.m.15 views

EUVD-2026-35088

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in the modproxyftp module in Apache HTTP Server with an attacker controlled backend FTP server. This issue affects undefined: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue...

5.4AI score0.00583EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2026/06/08 3:11 p.m.14 views

CVE-2026-44186

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in the modproxyftp module in Apache HTTP Server with an attacker controlled backend FTP server. This issue affects undefined: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue...

7.3CVSS5.4AI score0.00583EPSS
SaveExploits0
CVE
CVE
added 2026/06/08 3:11 p.m.224 views

CVE-2026-44186

CVE-2026-44186 affects Apache HTTP Server (mod_proxy_ftp). A loop with an unreachable exit condition can occur when handling an attacker-controlled backend FTP server, impacting 2.4.0 through 2.4.67. The issue’s remediation is to upgrade to Apache HTTP Server 2.4.68 or later. The provided connect...

7.3CVSS5.4AI score0.00583EPSS
SaveExploits0References2Affected Software1
Ubuntu
Ubuntu
added 2026/06/08 12:52 p.m.14 views

USN-8400-1: poppler vulnerability

It was discovered that poppler incorrectly handled certain malformed PDF tiling patterns in the Splash backend. An attacker could possibly use this issue to execute arbitrary code, obtain sensitive information, or cause a denial of service...

7.8CVSS5.8AI score0.00252EPSS
SaveExploits0
OSV
OSV
added 2026/06/08 12:52 p.m.15 views

USN-8400-1 poppler vulnerability

It was discovered that poppler incorrectly handled certain malformed PDF tiling patterns in the Splash backend. An attacker could possibly use this issue to execute arbitrary code, obtain sensitive information, or cause a denial of service...

7.8CVSS5.8AI score0.00252EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2026/06/08 10:16 a.m.19 views

USN-8396-1: Apache HTTP Server vulnerabilities

It was discovered that the Apache HTTP Server modrewrite module incorrectly handled certain privileges. A local attacker could possibly use this issue to obtain sensitive information. CVE-2026-24072 Andrew Lacambra, Elhanan Haenel, Tianshuo Han, and Tristan Madani discovered that the Apache HTTP...

9.8CVSS5.7AI score0.01376EPSS
SaveExploits1
Snyk
Snyk
added 2026/06/08 4:8 a.m.7 views

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash in the chunker.go process of the Qdrant Backend. An attacker can compromise data integrity or availability by exploiting the use of a weak hash algorithm in remote scenarios with low privileges and high attack complexit...

4.2CVSS6AI score0.0016EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/08 4:8 a.m.8 views

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash in the chunker.go process of the Qdrant Backend. An attacker can compromise data integrity or availability by exploiting the use of a weak hash algorithm in remote scenarios with low privileges and high attack complexit...

4.2CVSS6AI score0.0016EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/08 4:8 a.m.8 views

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash in the chunker.go process of the Qdrant Backend. An attacker can compromise data integrity or availability by exploiting the use of a weak hash algorithm in remote scenarios with low privileges and high attack complexit...

4.2CVSS6AI score0.0016EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/08 3:47 a.m.6 views

GHSA-6H35-9P2W-3J3R grepai Uses a Broken or Risky Cryptographic Algorithm

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS5AI score0.0016EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2026/06/08 3:47 a.m.7 views

grepai Uses a Broken or Risky Cryptographic Algorithm

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS5.2AI score0.0016EPSS
SaveExploits0References9Affected Software1
NVD
NVD
added 2026/06/08 3:16 a.m.13 views

CVE-2026-11479

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS0.0016EPSS
SaveExploits0References7
Rows per page
Query Builder