Lucene search
+L

109411 matches found

Snyk
Snyk
added 2026/08/26 12:33 a.m.8 views

Improper Validation of Unsafe Equivalence in Input

Overview org.apache.tomcat:tomcat-catalina is a Tomcat Servlet Engine Core Classes and Standard implementations. Affected versions of this package are vulnerable to Improper Validation of Unsafe Equivalence in Input in the HTTP/2 request handling. An attacker can bypass strict SNI validation by...

9.8CVSS5.9AI score0.00754EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/26 12:33 a.m.6 views

Allocation of Resources Without Limits or Throttling

Overview org.apache.tomcat:tomcat-coyote is a Tomcat Connectors and HTTP parser. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the HTTP/2 backlog tracking when a stream is reset. An attacker can exhaust system resources by repeatedly...

8.7CVSS5.9AI score0.0083EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/26 12:33 a.m.13 views

Insufficient Session Expiration

Overview org.apache.tomcat:tomcat-websocket is a Tomcat WebSocket JSR356 implementation. Affected versions of this package are vulnerable to Insufficient Session Expiration due to the improper termination of WebSocket sessions when the associated HTTP session ends. An attacker can maintain access...

6.8CVSS5.9AI score0.00536EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/26 12:30 a.m.6 views

EUVD-2026-66190

Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.39 through 9.0.120. The following versions were...

5.3AI score0.0083EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/26 12:25 a.m.9 views

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

A flaw was found in the HTTP/2 protocol implementation within the Go standard library golang.org/x/net and net/http/internal/http2. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGSMAXFRAMESIZE parameter set to zero. This...

7.5CVSS6.5AI score0.00781EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2026/08/26 12:25 a.m.11 views

Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.16.69 security update

Red Hat build of MicroShift release 4.16.69 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

9.6CVSS5.7AI score0.00798EPSS
SaveExploits0References5
Oracle linux
Oracle linux
added 2026/08/26 12:00 a.m.8 views

httpd security update

2.4.63-13.0.1.el102.6 - Replace index.html with Oracle's index page oracleindex.html. 2.4.63-13.6 - Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in modldap per-directory configuration CVE-2026-29167 2.4.63-13.5 - Resolves:...

9.8CVSS8.6AI score0.00688EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.11 views

PT-2026-82220

NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service. Each daemon starts the web service defined in src/webservice/WebService.cpp, whose bind address defaults to all interfaces, and registers routes for reading and writing gflags alongside status and statistics...

9.8CVSS5.4AI score0.0029EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.9 views

AlmaLinux 9 : httpd (ALSA-2026:59347)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:59347 advisory. httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in modldap per-directory configuration CVE-2026-29167 Tenable has...

9.8CVSS8.4AI score0.00688EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-79782

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can...

9.3CVSS5.9AI score0.00132EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.4 views

Oracle Linux 8 : nginx:1.24 (ELSA-2026-59216)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59216 advisory. - Resolves: RHEL-217957 - nginx:1.24/nginx: NGINX: Memory disclosure and denial of service in ngxhttpslicemodule CVE-2026-60005 - Resolves: RHEL-21930...

9.2CVSS8.3AI score0.99999EPSS
SaveExploits70References3
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.10 views

IBM Java 7.1 < 7.1.5.32 / 8.0 < 8.0.8.71 Multiple Vulnerabilities

The version of IBM Java installed on the remote host is 7.1 prior to 7.1.5.32 / 8.0 prior to 8.0.8.71. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle August 18 2026 CSPU advisory. - Vulnerability in Oracle Java SE component: 2D. Supported versions that are...

7.5CVSS6.1AI score0.00453EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.8 views

PT-2026-82110

Name of the Vulnerable Software and Affected Versions Http4s versions prior to 0.23.35 Http4s versions prior to 1.0.0-M47 Description An unauthenticated HTTP/2 peer can cause an out-of-memory denial of service in the Ember backend when HTTP/2 is enabled. The issue resides in the Hpack wrapper...

8.2CVSS5.9AI score0.00302EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.6 views

MiracleLinux 8 : java-1.8.0-openjdk-1.8.0.504.b01-1.1.el8 (AXSA:2026-1656:16)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1656:16 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has...

6.8CVSS6AI score0.0031EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-73180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed after a WebSocket...

6.8CVSS5.8AI score0.00536EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-77680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory...

5.3CVSS6.7AI score0.00655EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.12 views

PT-2026-82347

In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled. In order for this to happen, the application must be configured to use HAProxy Protocol. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52...

5.3CVSS5.3AI score0.00176EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.11 views

PT-2026-82358

The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor Netty HTTP server to consume an excessive amount of memory. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...

5.3CVSS5.3AI score0.00238EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.10 views

PT-2026-82296

Name of the Vulnerable Software and Affected Versions Weblate versions prior to 2026.7 Description Several endpoints perform object lookups using a global scope instead of restricting the search to projects the user is authorized to access. Consequently, the system returns an HTTP 403 Forbidden...

4.3CVSS5.9AI score0.00183EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.11 views

PT-2026-82348

Spring Data REST does not preserve the persisted version @Version property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20...

4.3CVSS5.2AI score0.00179EPSS
SaveExploits0References2
Rows per page
Query Builder