91805 matches found
CentOS Linux 8.4 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc (CENTOS8.4:CLSA-2026:1791552138)
The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791552138 advisory. - A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untruste...
CentOS Linux 8.5 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc (CENTOS8.5:CLSA-2026:1791552137)
The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791552137 advisory. - A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untruste...
PT-2026-109197
Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the frames it sends, THeaderTransport::transform copies the compressed frame into the write buffer without making sure it fits. Data that does not compress, such as...
PT-2026-108811
Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.4 Apache CXF versions prior to 4.1.9 Apache CXF versions prior to 3.6.13 Description The parser for multipart/MTOM attachment part headers fails to strictly enforce the attachment-max-header-size and...
fastjson
fastjson Fastjson es una librería de Java que se puede usar para convertir objetos Java a su representación JSON. También se puede usar para convertir una cadena JSON en un objeto Java equivalente. Fastjson puede trabajar con objetos Java arbitrarios, incluyendo objetos preexistentes de los cuale...
poc-cve-2025-69219
CVE-2025-69219 apache airflow deserializzazione non sicura verso RCE 1. copia poc.py nella directory dags di Airflow. 2. avvia il workflow poc dall'UI. 3. controlla i log delle attività per l'output dell'esecuzione...
CLSA-2026-1791482084 Fix of 7 CVEs
SECURITY UPDATE: modcharsetlite: heap overflow in finishpartialchar - debian/patches/CVE-2026-56153.patch: modcharsetlite: heap overflow in finishpartialchar - CVE-2026-56153 SECURITY UPDATE: modheartmonitor: NULL pointer dereference on malformed heartbeat - debian/patches/CVE-2026-46729.patch:...
Exploit for Unrestricted Upload of File with Dangerous Type in Apache Activemq
ActiveMQ Fileserver Arbitrary File Write CVE-2016-3088 Vul...
Exploit for Path Traversal in Apache Http_Server
Apache HTTP Server 2.4.50 Path Traversal and RCE CVE-2021-420...
CVE-2026-106449 vulnerabilities
Vulnerabilities for packages: hadoop-fips, solr-fips, cruise-control-fips, knative-kafka-broker-fips, automq, kafka-fips, thingsboard, kafka, apache-pulsar-fips, datahub-frontend, kayenta-fips, datahub-gms, spark-fips, apache-hop-fips, cassandra, apache-polaris-fips, elasticsearch-fips, pinot,...
CVE-2026-106450 vulnerabilities
Vulnerabilities for packages: hadoop-fips, solr-fips, cruise-control-fips, knative-kafka-broker-fips, automq, kafka-fips, thingsboard, kafka, apache-pulsar-fips, datahub-frontend, kayenta-fips, datahub-gms, spark-fips, apache-hop-fips, cassandra, apache-polaris-fips, elasticsearch-fips, pinot,...
GHSA-GM45-99XC-R7WV vulnerabilities
Vulnerabilities for packages: hadoop-fips, solr-fips, cruise-control-fips, knative-kafka-broker-fips, automq, kafka-fips, thingsboard, kafka, apache-pulsar-fips, datahub-frontend, kayenta-fips, datahub-gms, spark-fips, apache-hop-fips, cassandra, apache-polaris-fips, elasticsearch-fips, pinot,...
GHSA-343H-94H5-C4WR vulnerabilities
Vulnerabilities for packages: hadoop-fips, solr-fips, cruise-control-fips, knative-kafka-broker-fips, automq, kafka-fips, thingsboard, kafka, apache-pulsar-fips, datahub-frontend, kayenta-fips, datahub-gms, spark-fips, apache-hop-fips, cassandra, apache-polaris-fips, elasticsearch-fips, pinot,...
CVE-2026-47890 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, datahub-gms...
GHSA-J9F9-W8PJ-32F8 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, datahub-gms...
K000163606: Apache Tomcat vulnerability CVE-2026-78383
Security Advisory Description Allocation of resources without limits or throttling vulnerability in Apache Tomcat allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1...
Exploit for Deserialization of Untrusted Data in Apache Activemq
ActiveMQ OpenWire Deserialization RCE CVE-2023-46604 Vulhu...
Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat
Tomcat PUT Arbitrary File Write CVE-2017-12615 Vulhubhtt...