183819 matches found
curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies
A flaw was found in curl. When curl is configured to use distinct proxies for different URL schemes, a redirect from a URL using an authenticated proxy to one using an unauthenticated proxy can inadvertently expose the initial proxy's credentials. This improper credential management CWE-522 may...
libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials
A flaw was found in curl. When libcurl is instructed to clear proxy authentication credentials, it fails to do so, leaving the old credentials available. This could lead to the unintended reuse of sensitive proxy authentication credentials for subsequent network transfers, potentially resulting i...
httpd: SSRF in Apache HTTP Server with mod_proxy loaded
A Server-side request forgery SSRF vulnerability exists in Apache httpd when the server has modproxy loaded and is configured with modheaders to modify the Content-Type header in the HTTP request or response using a value supplied by the user. Under this configuration, this flaw allows an attacke...
httpd: Apache HTTP Server: Local .htaccess authors can read files with httpd user privileges
A flaw was found in Apache HTTP Server. This improper privilege management vulnerability allows local .htaccess authors to read files with the privileges of the httpd user. This could lead to unauthorized information disclosure...
httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers
A flaw was found in Apache HTTP Server. This heap-based buffer overflow vulnerability can be exploited by a malicious backend server when using ProxyPassReverseCookie directives. This could lead to a denial of service DoS condition, making the server unavailable to legitimate users...
curl: Information disclosure due to uncleared proxy authentication state
A flaw was found in libcurl. When reusing a libcurl handle for sequential transfers with environment-variable proxy configuration, the library does not properly clear the proxy authentication state. This oversight can lead to the unintended disclosure of Proxy-Authorization headers to an incorrec...
CVE-2026-65610
nnn stores homelen variable as uchart, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression homelen - 1 is promoted to signed int and becomes -1 an...
CVE-2026-76235
A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie, allowing a remote unauthenticated attacker to exhaust memory on the host and cause a denial of service...
CVE-2026-59902 vulnerabilities
Vulnerabilities for packages: tez, trino, thingsboard, celeborn, management-api-for-apache-cassandra-5.0...
GHSA-8C42-7QJ2-3J46 vulnerabilities
Vulnerabilities for packages: neo4j, wildfly, logstash, zipkin, apache-activemq-artemis, spark, trino, druid, tez, wavefront-proxy, akhq, celeborn, apache-pulsar, apicurio-registry, infinispan, keycloak, opensearch, kserve-modelmesh, flyway, thingsboard, strimzi-kafka-operator,...
CVE-2026-59903 vulnerabilities
Vulnerabilities for packages: neo4j, wildfly, logstash, zipkin, apache-activemq-artemis, spark, trino, druid, tez, wavefront-proxy, akhq, celeborn, apache-pulsar, apicurio-registry, infinispan, keycloak, opensearch, kserve-modelmesh, flyway, thingsboard, strimzi-kafka-operator,...
CVE-2026-59893 vulnerabilities
Vulnerabilities for packages: airflow, mycli, mlflow...
GHSA-F2FF-P2WW-7P4P vulnerabilities
Vulnerabilities for packages: airflow, mycli, mlflow...
GHSA-3496-9G83-7V6X vulnerabilities
Vulnerabilities for packages: airflow, mycli, mlflow...
CVE-2026-54284 vulnerabilities
Vulnerabilities for packages: airflow, mycli, mlflow...
CVE-2026-71491 vulnerabilities
Vulnerabilities for packages: airflow, mycli, mlflow...
GHSA-PWGV-4X5Q-6M9F vulnerabilities
Vulnerabilities for packages: airflow, mycli, mlflow...
[SECURITY] Fedora 44 Update: python3.14-3.14.7-1.fc44
Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...
