EUVD-2026-60613

ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials...

Important: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

Advisory ROSA-SA-2023-2270

software: thrift 0.10.0 WASP: ROSA-CHROME packageevrstring: thrift-0.10.0-18.src.rpm CVE-ID: CVE-2018-1320 BDU-ID: 2019-04255 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the org.apache.thrift.transport.TSaslTransport class of the Apache Thrift interface description language is related to...

The vulnerability of the org.apache.thrift.transport.TSaslTransport class in the Apache Thrift interface description allows a attacker to circumvent SASL protocols.

The vulnerability of the org.apache.thrift.transport.TSaslTransport class in the Apache Thrift interface description exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to bypass SASL protocols remotely...

memcached < 1.4.17 Multiple Vulnerabilities

According to its self-reported version, the version of memcached installed on the remote host is a version prior to 1.4.17. It is, therefore, reportedly affected by the following vulnerabilities : - An error exists related to handling SASL requests that could allow authentication bypasses...