CVE-2026-74879 openssl_encrypt before 1.4.0 Information Disclosure via /ready endpoint

opensslencrypt versions before 1.4.0 contain an information disclosure vulnerability in the /ready endpoint that returns full database exception strings to unauthenticated callers. Attackers can trigger database errors to extract sensitive information including hostnames, IP addresses, connection...

Design/Logic Flaw

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long exception string in a throw statement, possibly a related issue to CVE-2009-1514...