65301 matches found
VMware Spring for Apache Kafka 输入验证错误漏洞
VMware Spring for Apache Kafka is a Kafka messaging integration framework developed by VMware, Inc. Versions of Spring for Apache Kafka such as 4.0.0 and earlier, 3.3.0 and earlier, 3.2.0 and earlier, 2.9.0 and earlier, and 2.8.0 and earlier have a input validation vulnerability. This vulnerabili...
VMware Spring for Apache Kafka 代码问题漏洞
VMware Spring for Apache Kafka is a Kafka messaging integration framework developed by VMware, Inc. Versions of VMware Spring for Apache Kafka prior to 4.0.0, as well as versions 3.3.0 and earlier, 3.2.0 and earlier, 2.9.0 and earlier, and 2.8.0 and earlier, contain code vulnerabilities. These...
RHEL 9 : mod_http2 (RHSA-2026:25057)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:25057 advisory. The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers. Security Fixes: httpd: HTTP/2: Remote...
Important: httpd:2.4 security update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 For more details about the security issues, including the impact, a CVSS scor...
PT-2026-48436
Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, POST /waf///rule//save accepts a config file name form field that is passed straight through to config mod.master slave upload and restart... as the destination path. The validati...
ALSA-2026:25090 Important: httpd:2.4 security update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 For more details about the security issues, including the impact, a CVSS scor...
GHSA-5XRH-QMMQ-W6CH vulnerabilities
Vulnerabilities for packages: trino, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, celeborn, hadoop-fips, thingsboard, pinot-fips, pinot, seata, tez, management-api-for-apache-cassandra-4.1, apache-hop-fips, apache-hop...
CVE-2026-46340 vulnerabilities
Vulnerabilities for packages: trino, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, celeborn, hadoop-fips, thingsboard, pinot-fips, pinot, seata, tez, management-api-for-apache-cassandra-4.1, apache-hop-fips, apache-hop...
Unsafe Reflection
Apache Calcite is vulnerable to Unsafe Reflection. The vulnerability is due to the use of externally controlled input to select and instantiate classes at runtime, allowing attackers to influence reflection-based operations and potentially execute unintended code paths or load unauthorized classe...
CVE-2026-45673 vulnerabilities
Vulnerabilities for packages: spark-kubernetes-operator, trino, zipkin, spark, thingsboard, elasticsearch-fips, seata, s3proxy, hono, apache-pulsar-fips, kafka-bridge, management-api-for-apache-cassandra-4.1, wildfly, apache-nifi, celeborn, keycloak-fips, sonarqube, akhq, strimzi-kafka-operator,...
GHSA-5PVG-856G-CP85 vulnerabilities
Vulnerabilities for packages: spark-kubernetes-operator, trino, zipkin, spark, thingsboard, elasticsearch-fips, seata, s3proxy, hono, apache-pulsar-fips, kafka-bridge, management-api-for-apache-cassandra-4.1, wildfly, apache-nifi, celeborn, keycloak-fips, sonarqube, akhq, strimzi-kafka-operator,...
GHSA-676X-F7GG-47VC vulnerabilities
Vulnerabilities for packages: spark-kubernetes-operator, trino, zipkin, spark, thingsboard, elasticsearch-fips, seata, s3proxy, hono, apache-pulsar-fips, kafka-bridge, management-api-for-apache-cassandra-4.1, wildfly, apache-nifi, celeborn, keycloak-fips, sonarqube, akhq, strimzi-kafka-operator,...
GHSA-W573-9FFJ-6FF9 vulnerabilities
Vulnerabilities for packages: spark-kubernetes-operator, cassandra-fips, trino, zipkin, spark, thingsboard, kafka, zookeeper, seata, s3proxy, hono, apache-pulsar-fips, management-api-for-apache-cassandra-4.1, wildfly, apache-nifi, celeborn, keycloak-fips, wavefront-proxy, akhq,...
CVE-2026-44893 vulnerabilities
Vulnerabilities for packages: trino, zipkin, thingsboard, seata, hono, management-api-for-apache-cassandra-4.1, apache-pulsar-fips, celeborn, keycloak-fips, knative-kafka-broker-fips, tez, apache-pulsar, request-9047-keycloak-fips, apache-activemq-artemis, management-api-for-apache-cassandra-4.0,...
CVE-2026-45674 vulnerabilities
Vulnerabilities for packages: spark-kubernetes-operator, trino, zipkin, spark, thingsboard, elasticsearch-fips, seata, s3proxy, hono, apache-pulsar-fips, kafka-bridge, management-api-for-apache-cassandra-4.1, wildfly, apache-nifi, celeborn, keycloak-fips, sonarqube, akhq, strimzi-kafka-operator,...
GHSA-XMV7-R254-6Q78 vulnerabilities
Vulnerabilities for packages: spark-kubernetes-operator, trino, zipkin, spark, thingsboard, elasticsearch-fips, seata, s3proxy, hono, apache-pulsar-fips, kafka-bridge, management-api-for-apache-cassandra-4.1, wildfly, apache-nifi, celeborn, keycloak-fips, sonarqube, akhq, strimzi-kafka-operator,...
CVE-2026-47244 vulnerabilities
Vulnerabilities for packages: spark-kubernetes-operator, trino, zipkin, spark, thingsboard, elasticsearch-fips, seata, hono, apache-pulsar-fips, kafka-bridge, management-api-for-apache-cassandra-4.1, apache-camel-karavan-devmode, wildfly, apache-nifi, celeborn, keycloak-fips, wavefront-proxy,...
CVE-2026-47691 vulnerabilities
Vulnerabilities for packages: spark-kubernetes-operator, trino, zipkin, spark, thingsboard, elasticsearch-fips, seata, s3proxy, hono, apache-pulsar-fips, kafka-bridge, management-api-for-apache-cassandra-4.1, wildfly, apache-nifi, celeborn, keycloak-fips, sonarqube, akhq, strimzi-kafka-operator,...
GHSA-5X3R-WRVG-RP6Q vulnerabilities
Vulnerabilities for packages: spark-kubernetes-operator, trino, zipkin, spark, thingsboard, elasticsearch-fips, seata, hono, apache-pulsar-fips, kafka-bridge, management-api-for-apache-cassandra-4.1, apache-camel-karavan-devmode, wildfly, apache-nifi, celeborn, keycloak-fips, wavefront-proxy,...
CVE-2026-45536 vulnerabilities
Vulnerabilities for packages: spark-kubernetes-operator, cassandra-fips, trino, zipkin, spark, thingsboard, kafka, zookeeper, seata, s3proxy, hono, apache-pulsar-fips, management-api-for-apache-cassandra-4.1, wildfly, apache-nifi, celeborn, keycloak-fips, wavefront-proxy, akhq,...