EUVD-2026-28593

The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...

CVE-2026-39816

The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...

CVE-2026-39816 Apache NiFi: Missing Execute Code Required Permission on TinkerpopClientService

The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...

CVE-2026-42778 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, apache-nifi, apache-hop, jenkins, guacamole-client...

GHSA-VF5J-865M-MQ7C vulnerabilities

Vulnerabilities for packages: apache-hop-fips, apache-nifi, apache-hop, jenkins, guacamole-client...

GHSA-RGRR-P7GP-5XJ7 vulnerabilities

Vulnerabilities for packages: celeborn, apache-hop-fips, management-api-for-apache-cassandra-5.0, hadoop-fips, pinot-fips, pinot, thingsboard, druid, seata, tez, management-api-for-apache-cassandra-4.1, trino, apache-hop, management-api-for-apache-cassandra-4.0...

CVE-2026-42586 vulnerabilities

Vulnerabilities for packages: celeborn, apache-hop-fips, management-api-for-apache-cassandra-5.0, hadoop-fips, pinot-fips, pinot, thingsboard, druid, seata, tez, management-api-for-apache-cassandra-4.1, trino, apache-hop, management-api-for-apache-cassandra-4.0...

GHSA-995C-6RP3-4M4X vulnerabilities

Vulnerabilities for packages: apache-hop-fips, apache-nifi, apache-hop, jenkins, guacamole-client...

GHSA-2C5C-CHWR-9HQW vulnerabilities

Vulnerabilities for packages: opensearch-fips, apache-hop-fips, spark-fips, camunda, spark-kubernetes-operator-fips, camunda-zeebe, spark-kubernetes-operator, druid, opensearch, spark, trino, apache-hop...

CVE-2026-42779 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, apache-nifi, apache-hop, jenkins, guacamole-client...

CVE-2026-42582 vulnerabilities

Vulnerabilities for packages: opensearch-fips, apache-hop-fips, spark-fips, camunda, spark-kubernetes-operator-fips, camunda-zeebe, spark-kubernetes-operator, druid, opensearch, spark, trino, apache-hop...

CVE-2025-69233

Due to multiple time-of-check time-of-use race conditions in the resource count check and increment logic, as well as missing validations, users of the platform are able to exceed the allocation limits configured for their accounts/domains. This can be used by an attacker to degrade the...

CLSA-2026-1778055087 php: Fix of 3 CVEs

CVE-2018-5711: Fix infinite loop in gdImageCreateFromGifCtx libgd when reading crafted GIF - CVE-2018-17082: Fix XSS via Transfer-Encoding: chunked in apache2 SAPI - CVE-2018-10545: Do not set PRSETDUMPABLE by default in php-fpm child...

CVE-2026-24072

A flaw was found in Apache HTTP Server. This escalation of privilege vulnerability allows local attackers, specifically those with the ability to author .htaccess files, to read sensitive files. This flaw enables unauthorized access to files with the privileges of the httpd user, potentially...

EUVD-2013-7294

Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DBFile will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted...

CVE-2013-10075

Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DBFile will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted...

CVE-2013-10075

Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DBFile will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted...

CVE-2013-10075

The connected EUVD-2013-7294 entry confirms a vulnerability in Apache::Session for Perl (versions up to 1.94). The issue arises when re-creating deleted sessions via the File and DB_File stores, allowing a session that should have been deleted to be revived and potentially reusing data intended f...

CVE-2013-10075 Apache::Session versions through 1.94 for Perl re-creates deleted sessions

Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DBFile will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted...

CVE-2013-10075 Apache::Session versions through 1.94 for Perl re-creates deleted sessions

Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DBFile will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted...