Lucene search
+L

10 matches found

osv_cleanstart
osv_cleanstart
•added 2026/10/14 12:37 a.m.•15 views

CLEANSTART-2026-XR18271 unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted add_auth("ensemble",

CVE-2026-84501 affects multiple packages. An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted addauth"ensemble",. See references for individual vulnerability details...

5.3CVSS7.4AI score0.00742EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/08 12:42 a.m.•18 views

CLEANSTART-2026-ZA11117 unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted add_auth("ensemble",

CVE-2026-84501 affects multiple packages. An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted addauth"ensemble",. See references for individual vulnerability details...

5.3CVSS7.4AI score0.00742EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/09/29 12:38 a.m.•17 views

CLEANSTART-2026-KR26174 unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted add_auth("ensemble",

Security vulnerability affects the apache-hive package. An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted addauth"ensemble",...

9.8CVSS7.3AI score0.00742EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/17 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-84501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted addauthensemble, ... request...

5.3CVSS7.3AI score0.00742EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/09/16 10:16 a.m.•17 views

DEBIAN-CVE-2026-84501

An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted addauth"ensemble", ... request containing newline characters \n. When the ensemble name doesn't match, EnsembleAuthenticationProvider.handleAuthentication logs the raw,...

5.3CVSS7.4AI score0.00742EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 10:16 a.m.•24 views

CVE-2026-84501

An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted addauth"ensemble", ... request containing newline characters \n. When the ensemble name doesn't match, EnsembleAuthenticationProvider.handleAuthentication logs the raw,...

5.3CVSS0.00742EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/16 9:28 a.m.•23 views

EUVD-2026-80334

An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted addauth"ensemble", ... request containing newline characters \n. When the ensemble name doesn't match, EnsembleAuthenticationProvider.handleAuthentication logs the raw,...

5.3CVSS7.4AI score0.00742EPSS
SaveExploits0References1
Mend
Mend
•added 2026/09/16 9:28 a.m.•13 views

CVE-2026-84501

An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted addauth"ensemble", ... request containing newline characters \n. When the ensemble name doesn't match, EnsembleAuthenticationProvider.handleAuthentication logs the raw,...

6.9CVSS7.3AI score0.00742EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2026/09/16 9:28 a.m.•26 views

CVE-2026-84501

An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted addauth"ensemble", ... request containing newline characters \n. When the ensemble name doesn't match, EnsembleAuthenticationProvider.handleAuthentication logs the raw,...

5.3CVSS7.4AI score0.00742EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•9 views

CVE-2026-84501: Improper Output Neutralization for Logs

An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted addauth"ensemble", ... request containing newline characters \n. When the ensemble name doesn't match, EnsembleAuthenticationProvider.handleAuthentication logs the raw,...

5.3CVSS7.4AI score0.00742EPSS
SaveExploits0References3
Rows per page
Query Builder