65834 matches found
PT-2026-35685
Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.23.0 Description Improper validation of certificates with host mismatch occurs in the Java TSSLTransportFactory hostname verification process. Recommendations Upgrade to version 0.23.0...
Apache Thrift 输入验证错误漏洞
Apache Thrift is a framework for cross-platform development developed by the Apache Foundation in the United States. Prior to Apache Thrift 0.23.0, there was a vulnerability related to input validation errors. This vulnerability stemmed from integer overflows or circularity issues in the...
PT-2026-35703
Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.23.0 Description An out-of-bounds read issue exists in Apache Thrift, which occurs when the software reads data past the end of the intended buffer. Recommendations Upgrade to version 0.23.0...
Apache Thrift 安全漏洞
Apache Thrift is a framework for cross-platform development developed by the Apache Foundation in the United States. Versions of Apache Thrift prior to 0.23.0 contained a security vulnerability caused by uncontrolled recursion...
Apache Thrift 安全漏洞
Apache Thrift is a framework for cross-platform development developed by the Apache Foundation in the United States. Versions of Apache Thrift prior to 0.23.0 contained a security vulnerability caused by uncontrolled recursion...
Apache Thrift 缓冲区错误漏洞
Apache Thrift is a framework for cross-platform development developed by the Apache Foundation in the United States. Versions of Apache Thrift prior to 0.23.0 contained a buffer error vulnerability, which was caused by out-of-bounds read operations...
PT-2026-35702
Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.23.0 Description Uncontrolled recursion occurs in Apache Thrift, which can lead to system instability or crashes when the software processes deeply nested data structures. Recommendations Upgrade to version...
Linux Distros Unpatched Vulnerability : CVE-2026-41635
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache MINA's AbstractIoBuffer.resolveClass contains two branches, one of them for static classes or primitive types does not check the class at all, bypassing...
Apache Thrift 安全漏洞
Apache Thrift is a framework for cross-platform development developed by the Apache Foundation in the United States. Versions of Apache Thrift prior to 0.23.0 contained a security vulnerability. This vulnerability stemmed from mismatches in the memory management routines in the cglib language...
Apache Thrift 安全漏洞
Apache Thrift is a framework for cross-platform development developed by the Apache Foundation in the United States. Versions of Apache Thrift prior to 0.23.0 contained a security vulnerability, which was caused by improper validation of certificates when they did not match the hostnames...
Apache Thrift 缓冲区错误漏洞
Apache Thrift is a framework for cross-platform development developed by the Apache Foundation in the United States. Versions of Apache Thrift prior to 0.23.0 contained a buffer error vulnerability, which was caused by an out-of-bounds read issue...
PT-2026-35704
Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.23.0 Description Uncontrolled Recursion occurs in the Node.js bindings of Apache Thrift. Uncontrolled recursion is a condition where a function calls itself without a proper termination condition, potentially...
PT-2026-35699
Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.23.0 Description An integer overflow or wraparound issue exists in the Go language implementation of the TFramedTransport component in Apache Thrift. An integer overflow occurs when an arithmetic operation...
CVE-2026-40490 vulnerabilities
Vulnerabilities for packages: druid, apache-pulsar, tez...
CVE-2026-5598 vulnerabilities
Vulnerabilities for packages: thingsboard, sonarqube, keycloak, kserve-modelmesh, ruby3.4-bouncy-castle-java, spark, jruby, jenkins, gradle, druid, zipkin, ruby3.2-bouncy-castle-java, apache-nifi, logstash, ruby4.0-bouncy-castle-java, apache-pulsar, ruby3.3-bouncy-castle-java, wildfly...
GHSA-CMXV-58FP-FM3G vulnerabilities
Vulnerabilities for packages: druid, apache-pulsar, tez...
GHSA-P93R-85WP-75V3 vulnerabilities
Vulnerabilities for packages: thingsboard, sonarqube, keycloak, kserve-modelmesh, ruby3.4-bouncy-castle-java, spark, jruby, jenkins, gradle, druid, zipkin, ruby3.2-bouncy-castle-java, apache-nifi, logstash, ruby4.0-bouncy-castle-java, apache-pulsar, ruby3.3-bouncy-castle-java, wildfly...
GHSA-CMXV-58FP-FM3G vulnerabilities
Vulnerabilities for packages: tez, pinot-fips, pinot, druid, apache-pulsar, apache-pulsar-fips...
