Apache Software Foundation

Vulnérabilités associées 99

• Non évaluée Out-of-bounds read and write in the Count-Min sketch deserialization of Apache DataSketches C++ ... CVE-2026-103634 15:42
• Moyenne 8.2 Apache Traffic Server can crash with a null pointer dereference when a client POST request is... CVE-2026-112381 04:20
• Moyenne 6.9 Apache Traffic Server can stall a chunked transfer that it passes through with its trailers... CVE-2026-111817 04:20
• Critique 10.0 Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen... CVE-2026-111812 04:18
• Critique 9.4 Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read, write... CVE-2026-111811 04:17
• Critique 9.3 Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or... CVE-2026-111809 04:16
• Élevée 8.7 Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one unthrottled diagnostic log line for... CVE-2026-111810 04:14
• Critique 10.0 Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a... CVE-2026-111815 04:13
• Critique 10.0 Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session... CVE-2026-111814 04:13
• Élevée 8.6 Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a malformed... CVE-2026-111808 04:11
• Élevée 8.6 Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a truncated... CVE-2026-111805 04:10
• Critique 9.3 Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a... CVE-2026-111816 03:26
• Élevée 8.7 When a client sends a POST with Expect: 100-continue and the origin answers before reading the... CVE-2025-55702 03:24
• Élevée 9.1 Apache Traffic Server can return an origin connection to the shared pool while the origin is... CVE-2025-31699 03:22
• Élevée 8.8 Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close... CVE-2026-111804 03:21
• Critique 10.0 Apache Traffic Server's experimental magick plugin lets an unauthenticated client control... CVE-2026-111813 03:20
• Élevée 7.7 The Pulsar Packages Management Service can be configured to store packages on the local... CVE-2026-105945 03:18
• Critique 10.0 Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own... CVE-2026-105944 03:17
• Élevée 7.7 When a configured proxy role sends a request to the broker on behalf of another user (the... CVE-2026-105942 03:14
• Faible 2.3 Apache Pulsar namespaces can restrict which roles may use a subscription, either with the Prefix... CVE-2026-105938 03:13
• Élevée 8.7 Apache Pulsar shadow topics (PIP-180) are topics that read the stored messages of a source topic... CVE-2026-105937 03:12
• Moyenne 5.3 The Pulsar Functions worker REST API provides two endpoints that return the catalog of Pulsar IO... CVE-2026-105936 03:11
• Moyenne 4.9 The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which... CVE-2026-105935 03:10
• Élevée 7.2 The Apache Pulsar broker admin REST API provides a truncate operation for persistent topics ... CVE-2026-105934 03:08
• Faible 2.3 Apache Pulsar allows an administrator to require end-to-end message encryption for all topics in... CVE-2026-105933 03:07
• Faible 2.3 The Apache Pulsar broker admin REST API provides endpoints to read, set and remove the topic... CVE-2026-105932 03:06
• Faible 2.3 The Apache Pulsar broker exposes a transaction administration REST API under /admin/v3... CVE-2026-105931 03:02
• Moyenne 6.0 When package management is enabled, Pulsar Functions, Sources and Sinks can be registered or... CVE-2026-105930 03:01
• Faible 2.3 The Apache Pulsar WebSocket service allows a WebSocket consumer to configure a dead letter policy... CVE-2026-105927 03:00
• Moyenne 5.3 The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the... CVE-2026-105926 02:59