305 matches found
BIT-APACHE-2026-93546 Apache HTTP Server: mod_dav_fs namespace overflow
Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...
Linux Distros Unpatched Vulnerability : CVE-2026-93546
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and...
CVE-2026-93546
A flaw was found in httpd. An integer overflow in the moddavfs module occurs when processing Web Distributed Authoring and Versioning WebDAV PROPPATCH requests that declare an excessive number of XML namespaces. An authenticated remote attacker with write access can exploit this flaw to crash...
DEBIAN-CVE-2026-93546
Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...
CVE-2026-93546
Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...
UBUNTU-CVE-2026-93546
Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...
CVE-2026-93546 Apache HTTP Server: mod_dav_fs namespace overflow
Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...
EUVD-2026-90910
Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...
CVE-2026-93546
Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...
PT-2026-103943
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.69 Description An integer overflow exists in the mod dav fs module. An authenticated WebDAV client with write access can trigger this issue by sending PROPPATCH requests that declare an excessive number...
Apache HTTPD: CVE-2026-93546: Integer Overflow or Wraparound
Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...
SUSE CVE-2026-51936
Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...
CVE-2026-51936
A flaw was found in SQLCipher. An attacker with local access can bypass defensive security restrictions and cause database corruption by supplying a crafted source database name to the sqlcipherexport function. Because defensive restrictions are temporarily relaxed during export operations,...
CVE-2026-51936
Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...
CVE-2026-51936
Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...
CVE-2026-51936
Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...
CVE-2026-51936
Zetetic SQLCipher versions prior to 4.15.0 are vulnerable to SQL injection via the sqlcipher_export convenience function. This function, which is primarily used to copy database contents or convert between plaintext and encrypted formats, temporarily disables defensive restrictions to perform dyn...
EUVD-2026-89542
Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...
CVE-2026-51936
Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...
PT-2026-102968
Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipher export convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus...