63568 matches found
EUVD-2026-44604
A SQL Injection vulnerability exists in Apache Fineract's Report Execution API runreports endpoint in versions up to and including 1.14.0. Report parameter values are incorporated into the generated SQL query without sufficient validation, allowing an authenticated user with permission to run...
CVE-2026-35152
The CVE covers a SQL Injection in Apache Fineract’s Report Execution API (runreports endpoint) affecting versions up to and including 1.14.0. The vulnerability arises because report parameter values are embedded into the generated SQL without sufficient validation, enabling an authenticated user ...
EUVD-2026-44603
A boolean-based SQL Injection vulnerability exists in Apache Fineract's Client Search API GET /api/v1/clients in versions up to and including 1.14.0. The orderBy and sortOrder request parameters are concatenated into a SQL query without sufficient validation, allowing an authenticated user with...
CVE-2026-56287 Apache Fineract: Boolean SQL Injection in Client Search API (orderBy parameter) leading to Local File Disclosure
A boolean-based SQL Injection vulnerability exists in Apache Fineract's Client Search API GET /api/v1/clients in versions up to and including 1.14.0. The orderBy and sortOrder request parameters are concatenated into a SQL query without sufficient validation, allowing an authenticated user with...
CVE-2026-56287
Summary: CVE-2026-56287 describes a boolean-based SQL Injection in Apache Fineract’s Client Search API (GET /api/v1/clients) affecting versions up to 1.14.0. The orderBy and sortOrder parameters are concatenated into a SQL query without sufficient validation, enabling an authenticated user to inj...
K000162269: Apache HTTP Server Vulnerabilities CVE-2026-42535 and CVE-2026-42536
Security Advisory Description CVE-2026-42535 A path handling issue in moddavfs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes. Users are recommended to upgrade to version 2.4.68, which...
SUSE CVE-2026-59084
Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptInterceptor were not clearly documented. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.13 through 9.0.119, from...
CVE-2026-47065 vulnerabilities
Vulnerabilities for packages: guacamole-client, apache-nifi, jenkins, hadoop-fips...
GHSA-V3PR-HXPR-MFM8 vulnerabilities
Vulnerabilities for packages: guacamole-client, apache-nifi, jenkins, hadoop-fips...
CVE-2026-47065 vulnerabilities
Vulnerabilities for packages: apache-nifi, jenkins...
GHSA-V3PR-HXPR-MFM8 vulnerabilities
Vulnerabilities for packages: apache-nifi, jenkins...
PT-2026-58895
Name of the Vulnerable Software and Affected Versions Apache Fineract versions prior to 1.14.1 Description An authenticated user with permissions to view clients can exploit a boolean-based SQL Injection in the Client Search API endpoint '/api/v1/clients'. The issue occurs because the orderBy and...
The vulnerability of the OCSP protocol implementation in the Apache HTTP Server allows a perpetrator to induce a service failure.
The vulnerability of the OCSP protocol implementation in the Apache HTTP Server is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
PT-2026-60263
Name of the Vulnerable Software and Affected Versions Apache Ivy versions 2.0.0 through 2.5.3 Description The PackagerResolver in Apache Ivy allows the downloading and repackaging of online artifacts based on a packager.xml file. This process uses an Ant script stored in a subdirectory of the...
ROS-20260715-73-0008
The vulnerability of the moddavlock module in the Apache HTTP Server is related to pointer dereferencing. Exploiting this vulnerability could allow a remote attacker to cause a denial-of-service attack...
The vulnerability of the mod_proxy_ftp module in the Apache HTTP Server allows a hacker to cause a service failure.
The vulnerability of the modproxyftp module in the Apache HTTP Server is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerabilities of the modheaders and mod_mime modules in the Apache HTTP Server allow attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the modheaders and modmime modules in the Apache HTTP Server relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of the protected information...
The vulnerability of the mod_http2 module in the Apache HTTP Server allows a attacker to cause a service failure.
The vulnerability of the modhttp2 module in the Apache HTTP Server relates to the possibility of using memory after it is released. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the mod_lda module in the Apache HTTP Server allows a hacker to execute arbitrary code or cause a denial-of-service attack.
The vulnerability of the modlda module in the Apache HTTP Server is related to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial-of-service attack...