Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization.Check if you run itEPSS 0.19%Oct 8, 2026
- UnknownCVE-2026-82458 affecting package influxdb for versions less than 2.7.5-21Open the advisoryOct 2, 2026
- High8.8Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a dirCheck if you run itEPSS 0.44%Oct 1, 2026
- High7.5Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and a crafted uwsgi respCheck if you run itEPSS 0.50%Oct 1, 2026
- High7.5A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of seCheck if you run itEPSS 0.48%Oct 1, 2026
- High7.5Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of serviceCheck if you run itEPSS 0.88%Oct 1, 2026
- High7.5Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configuratiCheck if you run itEPSS 0.47%Oct 1, 2026
- Critical9.8Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions.Check if you run itEPSS 0.52%Oct 1, 2026
- Medium5.3Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebCheck if you run itEPSS 0.53%Oct 1, 2026
- High7.5Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies.Check if you run itEPSS 0.61%Oct 1, 2026
- High7.5Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite.Check if you run itEPSS 0.50%Oct 1, 2026
- High7.5Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause aCheck if you run itEPSS 0.61%Oct 1, 2026
- UnknownApache OFBiz Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 25.74%Sep 29, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.45%Sep 21, 2026
- UnknownSecurity exception in org.apache.lucene.util.ArrayUtil.copyOfSubArrayOpen the advisorySep 6, 2026
- Low3.7Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey.Check if you run itEPSS 0.41%Aug 23, 2026
- High7.5mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality.Check if you run itEPSS 0.49%Aug 21, 2026
- Medium6.8Missing Release of Resource after Effective Lifetime vulnerability in Apache CloudStack's scoped global configuration functionality.Check if you run itEPSS 0.59%Aug 21, 2026
- UnknownHTTP/2 Bomb CVE-2026-49975Check if you run itEPSS 4.17%Aug 12, 2026
- UnknownApache Struts Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 45.85%Jul 20, 2026
- UnknownApache CouchDB Improper Input ValidationPatch nowKEVEPSS 12.16%Jun 30, 2026
- UnknownApache OFBiz Deserialization of Untrusted DataPatch nowKEVEPSS 81.21%Jun 22, 2026
- Critical9.8ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy Assessment: Fully addressed.Check if you run itEPSS 0.50%Jun 3, 2026
- Medium6.9Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal.Check if you run itEPSS 0.42%Jun 2, 2026
- Low2.7Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal.Check if you run itEPSS 0.40%Jun 2, 2026