Lucene search
+L

305 matches found

osv_bit
osv_bit
•added 2026/10/06 11:41 a.m.•21 views

BIT-APACHE-2026-93546 Apache HTTP Server: mod_dav_fs namespace overflow

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...

8.8CVSS6AI score0.00436EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/02 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-93546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and...

8.8CVSS6AI score0.00436EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/10/01 11:42 p.m.•17 views

CVE-2026-93546

A flaw was found in httpd. An integer overflow in the moddavfs module occurs when processing Web Distributed Authoring and Versioning WebDAV PROPPATCH requests that declare an excessive number of XML namespaces. An authenticated remote attacker with write access can exploit this flaw to crash...

8.8CVSS6AI score0.00436EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2026/10/01 5:17 p.m.•18 views

DEBIAN-CVE-2026-93546

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...

8.8CVSS6AI score0.00436EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/01 5:17 p.m.•24 views

CVE-2026-93546

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...

8.8CVSS0.00436EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/10/01 5:17 p.m.•18 views

UBUNTU-CVE-2026-93546

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...

8.8CVSS6AI score0.00436EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/01 4:19 p.m.•93 views

CVE-2026-93546 Apache HTTP Server: mod_dav_fs namespace overflow

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...

0.00436EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/01 4:19 p.m.•31 views

EUVD-2026-90910

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...

8.8CVSS6AI score0.00436EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2026/10/01 4:19 p.m.•19 views

CVE-2026-93546

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...

8.8CVSS6AI score0.00436EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•15 views

PT-2026-103943

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.69 Description An integer overflow exists in the mod dav fs module. An authenticated WebDAV client with write access can trigger this issue by sending PROPPATCH requests that declare an excessive number...

8.8CVSS6.1AI score0.00472EPSS
SaveExploits0References55
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/01 12:00 a.m.•13 views

Apache HTTPD: CVE-2026-93546: Integer Overflow or Wraparound

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...

8.8CVSS6AI score0.00436EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/09/30 3:25 p.m.•21 views

SUSE CVE-2026-51936

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

2.1CVSS6AI score0.0018EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/09/30 3:10 a.m.•20 views

CVE-2026-51936

A flaw was found in SQLCipher. An attacker with local access can bypass defensive security restrictions and cause database corruption by supplying a crafted source database name to the sqlcipherexport function. Because defensive restrictions are temporarily relaxed during export operations,...

2.1CVSS6AI score0.0018EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/30 1:16 a.m.•19 views

CVE-2026-51936

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

2.1CVSS0.0018EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/09/30 12:19 a.m.•32 views

CVE-2026-51936

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

2.1CVSS6AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/30 12:19 a.m.•36 views

CVE-2026-51936

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

2.1CVSS0.0018EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/30 12:19 a.m.•38 views

CVE-2026-51936

Zetetic SQLCipher versions prior to 4.15.0 are vulnerable to SQL injection via the sqlcipher_export convenience function. This function, which is primarily used to copy database contents or convert between plaintext and encrypted formats, temporarily disables defensive restrictions to perform dyn...

2.1CVSS6AI score0.0018EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/30 12:19 a.m.•14 views

EUVD-2026-89542

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

2.1CVSS6AI score0.0018EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/30 12:19 a.m.•14 views

CVE-2026-51936

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

2.1CVSS6AI score0.0018EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•13 views

PT-2026-102968

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipher export convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus...

2.1CVSS6AI score0.0018EPSS
SaveExploits0References3
Rows per page
Query Builder