76 matches found
SUSE CVE-2026-63045
Improper validation of FTP PASV reply address in modproxyftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FTP server to cause the proxy to open a data connection to an arbitrary third-party host via a crafte...
Linux Distros Unpatched Vulnerability : CVE-2026-63045
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper validation of FTP PASV reply address in modproxyftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward...
CVE-2026-63045
Improper validation of FTP PASV reply address in modproxyftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FTP server to cause the proxy to open a data connection to an arbitrary third-party host via a crafte...
EUVD-2026-90901
Improper validation of FTP PASV reply address in modproxyftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FTP server to cause the proxy to open a data connection to an arbitrary third-party host via a crafte...
CVE-2026-63045 Apache HTTP Server: mod_proxy_ftp PASV address handling
Improper validation of FTP PASV reply address in modproxyftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FTP server to cause the proxy to open a data connection to an arbitrary third-party host via a crafte...
CVE-2026-63045
Improper validation of FTP PASV reply address in modproxyftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FTP server to cause the proxy to open a data connection to an arbitrary third-party host via a crafte...
CVE-2026-102727
FTP Passive Data Connection Not Bound to the Authenticated Control Peer...
CVE-2026-102727
FTP Passive Data Connection Not Bound to the Authenticated Control Peer...
EUVD-2026-89199
FTP Passive Data Connection Not Bound to the Authenticated Control Peer...
CVE-2026-102727
FTP Passive Data Connection Not Bound to the Authenticated Control Peer...
CVE-2026-102727
Technical details are not publicly available in the provided documents regarding CVE-2026-102727 . The description indicates an FTP Passive Data Connection Not Bound to the Authenticated Control Peer , but no specific product, version, or root cause is provided. Action: monitor for updates.
CVE-2026-102727
FTP Passive Data Connection Not Bound to the Authenticated Control Peer...
CVE-2026-102727: Improper Restriction of Communication Channel to Intended Endpoints
FTP Passive Data Connection Not Bound to the Authenticated Control Peer...
CVE-2026-79570
mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbConnect/data. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...
USN-8572-1 wget vulnerability
It was discovered that Wget did not properly validate the IP address provided in an FTP PASV response when operating in FTP passive mode. A remote attacker controlling a malicious FTP server, or an HTTP server that redirects to an FTP URL, could possibly use this issue to redirect Wget's data...
CVE-2026-15146 CVE-2026-15146
GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. A malicious FTP server, or an HTTP server that redirects to an FTP URL, can exploit this behavior to redirect Wget’s data connection to an arbitrary IP address and port. This allows an...
CVE-2026-15146: Undefined Security Weakness
GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. A malicious FTP server, or an HTTP server that redirects to an FTP URL, can exploit this behavior to redirect Wget’s data connection to an arbitrary IP address and port. This allows an...
SUSE SLES15 Security Update : gvfs (SUSE-SU-2026:0923-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0923-1 advisory. - CVE-2026-28295: Fix ftp use control connection address for PASV data bsc1258953. - CVE-2026-28296: Fix ftp reject paths containin...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004754)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004754 advisory. An issue was discovered in the Linux kernel before 5.15.11. There is a memory leak in the rdsconncreate function in net/rds/connection.c in a certain combination of...