Lucene search
+L

25254 matches found

osv_debian
osv_debian
•added 2026/10/02 12:17 p.m.•20 views

DEBIAN-CVE-2026-85086

Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

9.1CVSS5.8AI score0.00176EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/02 12:17 p.m.•23 views

CVE-2026-85086

Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

9.1CVSS0.00176EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/10/02 12:17 p.m.•18 views

UBUNTU-CVE-2026-85086

Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

9.1CVSS5.8AI score0.00176EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/10/02 12:17 p.m.•17 views

CVE-2026-85086

Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

9.1CVSS5.8AI score0.00176EPSS
SaveExploits0References3
Mend
Mend
•added 2026/10/02 11:34 a.m.•13 views

CVE-2026-85086

Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

9.1CVSS5.8AI score0.00176EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/02 11:34 a.m.•85 views

CVE-2026-85086

A vulnerability exists in the Apache Thrift perl bindings due to insecure default settings and improper certificate validation . These flaws cause client connections to fail to verify the authenticity of remote server certificates. An unauthenticated attacker positioned on the network could explo...

9.1CVSS5.8AI score0.00176EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/02 11:34 a.m.•18 views

EUVD-2026-91416

Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

9.1CVSS5.8AI score0.00176EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/02 11:34 a.m.•47 views

CVE-2026-85086 Apache Thrift: Perl TLS client disables certificate verification by default

Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

9.1CVSS0.00176EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/10/02 11:17 a.m.•15 views

CVE-2026-85494

Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python, Ruby, Erlang, Lua, Dart, JavaME, Perl, PHP and D...

8.7CVSS6AI score0.0031EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/02 10:42 a.m.•18 views

EUVD-2026-91401

Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python, Ruby, Erlang, Lua, Dart, JavaME, Perl, PHP and D...

8.7CVSS6AI score0.0031EPSS
SaveExploits0References2
osv_azl
osv_azl
•added 2026/10/02 10:17 a.m.•24 views

AZL-105431 CVE-2026-94634 affecting package thrift 0.24.0-1

Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.2CVSS6AI score0.00277EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/10/02 10:17 a.m.•20 views

DEBIAN-CVE-2026-94634

Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.2CVSS6AI score0.00277EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/10/02 10:17 a.m.•14 views

CVE-2026-94634

Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.2CVSS5.9AI score0.00277EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/02 10:11 a.m.•18 views

EUVD-2026-91364

Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.2CVSS6AI score0.00277EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/02 10:11 a.m.•10 views

CVE-2026-94634 Apache Thrift: Python `TJSONProtocol` has a string length limit that is off by default

Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.2CVSS6AI score0.00277EPSS
SaveExploits0References2
Mend
Mend
•added 2026/10/02 10:11 a.m.•16 views

CVE-2026-94634

Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.2CVSS6AI score0.00277EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/02 12:31 a.m.•19 views

EUVD-2026-91068

: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63...

7.2CVSS5.8AI score0.00148EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•10 views

PT-2026-104287

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift perl bindings contain an issue involving improper certificate validation and the initialization of a resource with an insecure default. Recommendations Upgrade to version 0.25.0...

9.2CVSS5.9AI score0.00374EPSS
SaveExploits0References39
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•14 views

PT-2026-104193

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description The Apache Thrift Python bindings contain an issue where resources are allocated without limits or throttling and a resource is initialized with an insecure default. Recommendations Update to...

8.7CVSS5.9AI score0.00374EPSS
SaveExploits0References41
NVD
NVD
•added 2026/10/01 10:17 p.m.•16 views

CVE-2026-71448

: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63...

7.2CVSS0.00148EPSS
SaveExploits0References1
Rows per page
Query Builder