2947 matches found
ROOT-OS-DEBIAN-13-CVE-2026-32327 CVE-2026-32327 in apr-util - Patched by Root
Root has patched CVE-2026-32327 in the apr-util package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-34191 CVE-2026-34191 in apr-util - Patched by Root
Root has patched CVE-2026-34191 in the apr-util package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-34502 CVE-2026-34502 in apr-util - Patched by Root
Root has patched CVE-2026-34502 in the apr-util package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-49506 CVE-2025-49506 in apr-util - Patched by Root
Root has patched CVE-2025-49506 in the apr-util package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-34501 CVE-2026-34501 in apr-util - Patched by Root
Root has patched CVE-2026-34501 in the apr-util package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-32327 CVE-2026-32327 in apr-util - Patched by Root
Root has patched CVE-2026-32327 in the apr-util package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-34191 CVE-2026-34191 in apr-util - Patched by Root
Root has patched CVE-2026-34191 in the apr-util package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-32327 CVE-2026-32327 in apr-util - Patched by Root
Root has patched CVE-2026-32327 in the apr-util package for Root:Debian:12. Multiple fixed versions available...
Astra Linux – Vulnerability in util-linux
util-linux is a collection of Linux utilities. Prior to version 2.41.4, a TOCTOU Time-of-Check-Time-of-Use vulnerability was identified in the SUID binary /usr/bin/mount from util-linux. When the mount binary sets up loop devices, it validates the source file path with user privileges using fork ...
CVE-2022-4995 Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp
Weaver Fanwei E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauthenticated attacker to upload arbitrary files, including JSP webshells, by submitting a multipart/form-data POST request to /workrelate/plan/util/uploaderOperate.jsp with arbitrary...
EUVD-2022-56014
Weaver Fanwei E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauthenticated attacker to upload arbitrary files, including JSP webshells, by submitting a multipart/form-data POST request to /workrelate/plan/util/uploaderOperate.jsp with arbitrary...
Linux Distros Unpatched Vulnerability : CVE-2025-49506
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking thei...
CVE-2026-32327
A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the aprxmlquoteelem function. Users are recommended to upgrade to version 1.6.4, which fixes this issue...
CVE-2025-49506
APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or Android. Users are...
CVE-2025-49506 Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack
APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or Android. Users are...
EUVD-2025-210642
APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or Android. Users are...
CVE-2026-32327
CVE-2026-32327 concerns the APR-util library. The connected sources confirm a vulnerability in version 1.6.3 and earlier where a stack recursion flaw can be triggered by XML parsing from untrusted sources via the apr_xml_quote_elem() function, potentially causing a crash. The issue affects APR-ut...
CVE-2026-32327 Apache Portable Runtime Utility: apr-util XML stack recursion crash
A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the aprxmlquoteelem function. Users are recommended to upgrade to version 1.6.4, which fixes this issue...
CVE-2026-32327
A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the aprxmlquoteelem function. Users are recommended to upgrade to version 1.6.4, which fixes this issue...