Lucene search
+L

1655 matches found

attackerkb
attackerkb
•added 2026/05/05 7:25 a.m.•17 views

CVE-2026-43869

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.1AI score0.00809EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/05/05 7:25 a.m.•18 views

CVE-2026-43869 Apache Thrift: TSSLTransportFactory.java hostname verification

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7AI score0.00809EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/05/05 7:25 a.m.•15 views

CVE-2026-43869 Apache Thrift: TSSLTransportFactory.java hostname verification

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.3CVSS5.9AI score
SaveExploits0References20
CVE
CVE
•added 2026/05/05 7:25 a.m.•107 views

CVE-2026-43869

Apache Thrift versions before 0.23.0 are vulnerable to an Improper Validation of Certificate with Host Mismatch vulnerability (CWE-297/CWE-295). This flaw occurs due to insufficient validation during the certificate verification process. Users are recommended to upgrade to version 0.23.0 to resol...

7.3CVSS7AI score0.00809EPSS
SaveExploits0References18Affected Software1
Debian CVE
Debian CVE
•added 2026/05/05 7:25 a.m.•37 views

CVE-2026-43869

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.3CVSS7AI score0.00809EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/05/05 12:00 a.m.•15 views

PT-2026-36991

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.23.0 Description An issue exists involving memory allocation with an excessive size value. Recommendations Upgrade to version 0.23.0...

7.5CVSS7.4AI score0.01199EPSS
SaveExploits0References24
CNNVD
CNNVD
•added 2026/05/05 12:00 a.m.•32 views

Apache Thrift 安全漏洞

Apache Thrift is a framework for cross-platform development developed by the Apache Foundation in the United States. Versions of Apache Thrift prior to 0.23.0 contained a security vulnerability, which was caused by an excessive memory allocation size value...

5.3CVSS7.4AI score0.01199EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/05 12:00 a.m.•3 views

CVE-2026-43868: Memory Allocation with Excessive Size Value

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.5CVSS7.5AI score0.01199EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/05 12:00 a.m.•33 views

Apache Thrift 安全漏洞

Apache Thrift is a framework for cross-platform development developed by the Apache Foundation in the United States. Versions of Apache Thrift prior to 0.23.0 contained a security vulnerability, which was caused by improper validation of certificate-hostname mismatches...

7.3CVSS7AI score0.00809EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/05 12:00 a.m.•2 views

CVE-2026-43869: Improper Validation of Certificate with Host Mismatch

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.3CVSS7.1AI score0.00809EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/05 12:00 a.m.•31 views

Apache Thrift 路径遍历漏洞

Apache Thrift is a framework for cross-platform development developed by the Apache Foundation in the United States. Versions of Apache Thrift prior to 0.23.0 contained a path traversal vulnerability. This vulnerability was caused by source validation errors, path traversal, improper handling of...

7.3CVSS7.1AI score0.00379EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/05 12:00 a.m.•1 views

PT-2026-109441

Уязвимость фреймворка Apache Thrift связана с недостатками ограничения имени пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...

7.5CVSS7.3AI score0.00379EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/05 12:00 a.m.•7 views

CVE-2026-43870: Origin Validation Error

Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Request/Response Splitting', Uncontrolled Resource Consumption vulnerability in Apache Thrift. This issue affects Apache Thrift:...

7.3CVSS7.2AI score0.00379EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/05/05 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-43869

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to...

7.3CVSS7AI score0.00809EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/05/05 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-43870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Improper Neutralization of CRLF Sequences in HTTP Headers...

7.3CVSS7.1AI score0.00379EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/05/05 12:00 a.m.•3 views

PT-2026-109440

Уязвимость фреймворка Apache Thrift связана с отсутствием проверки хостовых данных сертификата. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...

7.5CVSS7.2AI score0.00809EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/05/05 12:00 a.m.•22 views

PT-2026-36985

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.23.0 Description Improper validation of certificates with host mismatch occurs in Apache Thrift. Recommendations Upgrade to version 0.23.0...

7.3CVSS6.6AI score0.0082EPSS
SaveExploits0References320
Tenable Nessus
Tenable Nessus
•added 2026/05/05 12:00 a.m.•20 views

Linux Distros Unpatched Vulnerability : CVE-2026-43868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to...

7.5CVSS7.4AI score0.01199EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
•added 2026/04/30 8:11 a.m.•18 views

Apache Thrift: Node.js skip() recursion

...

8.7CVSS7.3AI score0.00732EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/30 8:11 a.m.•14 views

Apache Thrift: C++ JSON OOB read

...

9.1CVSS5.7AI score0.00896EPSS
SaveExploits0
Rows per page
Query Builder