Lucene search
+L

63735 matches found

OSV
OSV
added 2026/05/09 11:11 a.m.12 views

OESA-2026-2239 pdfbox security update

Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is...

4.3CVSS5.7AI score0.00711EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/09 11:11 a.m.15 views

OESA-2026-2245 apache-mina security update

Apache MINA is a network application framework which helps users develop high performance and high scalability network applications easily. It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO. Security Fixes: The fix for...

9.8CVSS6AI score0.00902EPSS
SaveExploits1References3
OSV
OSV
added 2026/05/09 11:11 a.m.16 views

OESA-2026-2243 apache-mina security update

Apache MINA is a network application framework which helps users develop high performance and high scalability network applications easily. It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO. Security Fixes: The fix for...

9.8CVSS6AI score0.00902EPSS
SaveExploits1References3
OSV
OSV
added 2026/05/09 11:11 a.m.17 views

OESA-2026-2241 apache-mina security update

Apache MINA is a network application framework which helps users develop high performance and high scalability network applications easily. It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO. Security Fixes: The fix for...

9.8CVSS6.1AI score0.00902EPSS
SaveExploits1References5
OSV
OSV
added 2026/05/09 11:11 a.m.24 views

OESA-2026-2242 apache-mina security update

Apache MINA is a network application framework which helps users develop high performance and high scalability network applications easily. It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO. Security Fixes: The fix for...

9.8CVSS6AI score0.00902EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/05/09 8:21 a.m.21 views

CVE-2026-33109

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...

9.9CVSS6AI score0.00711EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/05/09 3:23 a.m.16 views

SUSE CVE-2013-10075

Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DBFile will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted...

9.1CVSS5.8AI score0.00356EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/05/09 2:21 a.m.13 views

CVE-2026-33844

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...

9CVSS6.2AI score0.00988EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/05/09 12:00 a.m.12 views

Unity Linux 20.1060e / 20.1070e Security Update: tomcat (UTSA-2026-017355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017355 advisory. The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56...

7CVSS5.8AI score0.56636EPSS
SaveExploits16References4
Fedora
Fedora
added 2026/05/08 7:58 p.m.30 views

[SECURITY] Fedora 43 Update: proftpd-1.3.9a-1.fc43

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

8.1CVSS6AI score0.04275EPSS
SaveExploits7
Wolfi
Wolfi
added 2026/05/08 7:48 p.m.49 views

CVE-2026-42778 vulnerabilities

Vulnerabilities for packages: apache-nifi, jenkins...

9.8CVSS6.8AI score0.00657EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/05/08 7:48 p.m.22 views

GHSA-VF5J-865M-MQ7C vulnerabilities

Vulnerabilities for packages: apache-nifi, jenkins...

5.2AI score
SaveExploits0
Wolfi
Wolfi
added 2026/05/08 7:48 p.m.25 views

CVE-2026-42779 vulnerabilities

Vulnerabilities for packages: apache-nifi, jenkins...

9.8CVSS6.7AI score0.00902EPSS
SaveExploits1
Wolfi
Wolfi
added 2026/05/08 7:48 p.m.23 views

GHSA-995C-6RP3-4M4X vulnerabilities

Vulnerabilities for packages: apache-nifi, jenkins...

5.2AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/05/08 6:28 p.m.392 views

Exploit for Observable Timing Discrepancy in Apache Http_Server

CTT-enhanced-Apache-modauthdigest-timing-attack-exploit CTT-...

4.8CVSS5.8AI score0.00557EPSS
SaveExploits1
OSV
OSV
added 2026/05/08 3:31 p.m.10 views

GHSA-2J9M-25XV-MP6R Apache NiFi is missing the Restricted annotation with the Execute Code Required Permission

The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...

8.8CVSS5.9AI score0.0076EPSS
SaveExploits1References7
EUVD
EUVD
added 2026/05/08 3:31 p.m.18 views

EUVD-2026-28593

The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...

8.8CVSS5.9AI score0.0076EPSS
SaveExploits1References3
NVD
NVD
added 2026/05/08 2:16 p.m.18 views

CVE-2026-39816

The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...

8.8CVSS0.0076EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/05/08 1:38 p.m.13 views

CVE-2026-39816 Apache NiFi: Missing Execute Code Required Permission on TinkerpopClientService

The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...

7.5CVSS5.9AI score0.0076EPSS
SaveExploits1References1
Chainguard
Chainguard
added 2026/05/08 1:17 p.m.38 views

CVE-2026-42778 vulnerabilities

Vulnerabilities for packages: apache-hop, jenkins, guacamole-client, apache-hop-fips, apache-nifi...

9.8CVSS6.8AI score0.00657EPSS
SaveExploits0
Rows per page
Query Builder