CVE-2021-3317

Information Exploit Title: Klog Server 2.4.1 - Command Injection Authenticated Date: 26.01.2021 Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.klogserver.com/ Version: 2.4.1 Description: https://docs.unsafe-inline.com/0day/klog-server-authenticated-command-injection CVE:...

EUVD-2026-97573

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input used by the Query Console file-exploration endpoint, which could allow HTTP response splitting and unintended client-side response handling...

CVE-2026-85976

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are vulnerable to HTTP response splitting . The root cause is insufficient input sanitization within the Query Console file-exploration endpoint , which can lead to unintended client-side response handling . No specific ...

CVE-2026-85975

Progress MarkLogic Server (versions 12.x before 12.1.0 and 11.x before 11.3.7 ) may utilize cleartext transport for Amazon S3 connections by default. This vulnerability allows a network-positioned attacker to intercept sensitive data or credentials transmitted over an affected connection. No spec...

EUVD-2026-97572

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by default. A network-positioned attacker could intercept data or credentials transmitted through an affected connection...

CVE-2026-85975 Cleartext transmission in Progress MarkLogic Server Amazon S3 connections

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by default. A network-positioned attacker could intercept data or credentials transmitted through an affected connection...

CVE-2026-85974 Improper TLS hostname verification in Progress MarkLogic Server

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames for certain outbound connections. A network-positioned attacker could exploit this weakness to intercept or modify communications with an affected service...

CVE-2026-85974

Progress MarkLogic Server is vulnerable in 12.x releases before 12.1.0 and 11.x releases before 11.3.7 due to inconsistent TLS certificate hostname validation for specific outbound connections. A network-positioned attacker could exploit this weakness to intercept or modify communications with an...

EUVD-2026-97571

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames for certain outbound connections. A network-positioned attacker could exploit this weakness to intercept or modify communications with an affected service...

CVE-2026-85973 Cleartext transmission in Progress MarkLogic Server cluster join operations

Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communications. A network-positioned attacker could intercept or modify information transmitted through an affected connection...

EUVD-2026-97570

Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communications. A network-positioned attacker could intercept or modify information transmitted through an affected connection...

CVE-2026-85973

Progress MarkLogic Server 12.x releases before 12.1.0 are vulnerable to cleartext transmission during certain cluster-management communications. This occurs because the system may use unencrypted transport for cluster join operations, potentially allowing a network-positioned attacker to intercep...

CVE-2024-5736

CVE-2024-5736 AdmirorFrames Joomla! Extension 5.0 - Server-Side Request Forgery Timeline Vulnerability reported to vendor: 26.01.2024 New fixed 5.0 version released: 06.06.2024 Public disclosure: 28.06.2024 Description Server-Side Request Forgery in AdmirorFrames Joomla! Extension in afGdStream.p...

CVE-2026-85972 Improper Kerberos server verification in Progress MarkLogic Server

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in certain password-based authentication configurations. A network-positioned attacker could impersonate trusted authentication...

CVE-2026-85972

Progress MarkLogic Server versions 12.x (before 12.1.0) and 11.x (before 11.3.7) are vulnerable to improper Kerberos server verification . In specific password-based authentication configurations, the software fails to sufficiently verify the identity of the Kerberos authentication service. A net...

EUVD-2026-97567

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in certain password-based authentication configurations. A network-positioned attacker could impersonate trusted authentication...

CVE-2021-41773

CVE-2021-41773 🐛 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...

CVE-2026-85971 Incorrect log file permissions in Progress MarkLogic Server

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which could allow a local user to read or alter log data. The corrected default permissions apply to newly created and rotated logs;...

EUVD-2026-97566

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which could allow a local user to read or alter log data. The corrected default permissions apply to newly created and rotated logs;...

CVE-2026-85971

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are affected by a vulnerability where certain log files are assigned overly permissive operating-system permissions . This configuration flaw could allow a local user to read or alter log data, potentially impacting conf...