Lucene search
+L

1541 matches found

OSV
OSV
•added 2026/05/05 7:49 a.m.•14 views

CVE-2026-43868 Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

5.3CVSS5.9AI score
SaveExploits0References8
AlpineLinux
AlpineLinux
•added 2026/05/05 7:49 a.m.•29 views

CVE-2026-43868

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

5.3CVSS7.4AI score0.01199EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/05 7:49 a.m.•77 views

CVE-2026-43868 Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

0.01199EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/05 7:49 a.m.•104 views

CVE-2026-43868

A Memory Allocation with Excessive Size Value vulnerability (CWE-789) exists in Apache Thrift versions prior to 0.23.0 . This flaw is caused by the software handling excessive size values during memory allocation. Impact and specific exploit details are not provided in the documents. Users are re...

7.5CVSS7.4AI score0.01199EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
•added 2026/05/05 7:49 a.m.•74 views

CVE-2026-43868

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.5CVSS7.4AI score0.01199EPSS
SaveExploits0
CVE
CVE
•added 2026/05/05 7:45 a.m.•59 views

CVE-2026-43870

Apache Thrift versions prior to 0.23.0 are susceptible to multiple vulnerabilities, including Origin Validation Error , Path Traversal , HTTP Request/Response Splitting (via improper neutralization of CRLF sequences in HTTP headers), and Uncontrolled Resource Consumption . These issues stem from ...

7.3CVSS7.2AI score0.00379EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/05/05 7:45 a.m.•15 views

CVE-2026-43870

Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Request/Response Splitting', Uncontrolled Resource Consumption vulnerability in Apache Thrift. This issue affects Apache Thrift:...

7.2AI score0.00379EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2026/05/05 7:45 a.m.•55 views

CVE-2026-43870

Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Request/Response Splitting', Uncontrolled Resource Consumption vulnerability in Apache Thrift. This issue affects Apache Thrift:...

7.3CVSS7.2AI score0.00379EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/05/05 7:45 a.m.•50 views

CVE-2026-43870

Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Request/Response Splitting', Uncontrolled Resource Consumption vulnerability in Apache Thrift. This issue affects Apache Thrift:...

7.3CVSS7.2AI score0.00379EPSS
SaveExploits0
OSV
OSV
•added 2026/05/05 7:45 a.m.•15 views

CVE-2026-43870 Apache Thrift: Node.js web_server.js multi-vulnerability

Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Request/Response Splitting', Uncontrolled Resource Consumption vulnerability in Apache Thrift. This issue affects Apache Thrift:...

7.3CVSS5.9AI score
SaveExploits0References4
OSV
OSV
•added 2026/05/05 7:25 a.m.•15 views

CVE-2026-43869 Apache Thrift: TSSLTransportFactory.java hostname verification

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.3CVSS5.9AI score
SaveExploits0References20
Vulnrichment
Vulnrichment
•added 2026/05/05 7:25 a.m.•18 views

CVE-2026-43869 Apache Thrift: TSSLTransportFactory.java hostname verification

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7AI score0.00809EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/05 7:25 a.m.•103 views

CVE-2026-43869

Apache Thrift versions before 0.23.0 are vulnerable to an Improper Validation of Certificate with Host Mismatch vulnerability (CWE-297/CWE-295). This flaw occurs due to insufficient validation during the certificate verification process. Users are recommended to upgrade to version 0.23.0 to resol...

7.3CVSS7AI score0.00809EPSS
SaveExploits0References18Affected Software1
Cvelist
Cvelist
•added 2026/05/05 7:25 a.m.•110 views

CVE-2026-43869 Apache Thrift: TSSLTransportFactory.java hostname verification

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

0.00809EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/05 7:25 a.m.•17 views

CVE-2026-43869

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7AI score0.00809EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2026/05/05 7:25 a.m.•45 views

CVE-2026-43869

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.3CVSS7AI score0.00809EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/05/05 7:25 a.m.•36 views

CVE-2026-43869

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.3CVSS7AI score0.00809EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/05/05 12:00 a.m.•20 views

Linux Distros Unpatched Vulnerability : CVE-2026-43868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to...

7.5CVSS7.3AI score0.01199EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/05/05 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-43870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Improper Neutralization of CRLF Sequences in HTTP Headers...

7.3CVSS7.1AI score0.00379EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/05 12:00 a.m.•2 views

CVE-2026-43869: Improper Validation of Certificate with Host Mismatch

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.3CVSS7AI score0.00809EPSS
SaveExploits0References5
Rows per page
Query Builder