Apache Software Foundation
Liées 98slug: apache-software-foundation
Pas encore d'explication pour cette étiquette.
Vulnérabilités associées 100
- Élevée 8.7 UNSUPPORTED WHEN ASSIGNED Improper restriction of XML external entity references in Apache Abdera... CVE-2026-113582
- Non évaluée Out-of-bounds read and write in the Count-Min sketch deserialization of Apache DataSketches C++ ... CVE-2026-103634
- Moyenne 8.2 Apache Traffic Server can crash with a null pointer dereference when a client POST request is... CVE-2026-112381
- Moyenne 6.9 Apache Traffic Server can stall a chunked transfer that it passes through with its trailers... CVE-2026-111817
- Critique 10.0 Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen... CVE-2026-111812
- Critique 9.4 Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read, write... CVE-2026-111811
- Critique 9.3 Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or... CVE-2026-111809
- Élevée 8.7 Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one unthrottled diagnostic log line for... CVE-2026-111810
- Critique 10.0 Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a... CVE-2026-111815
- Critique 10.0 Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session... CVE-2026-111814
- Élevée 8.6 Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a malformed... CVE-2026-111808
- Élevée 8.6 Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a truncated... CVE-2026-111805
- Critique 9.3 Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a... CVE-2026-111816
- Élevée 8.7 When a client sends a POST with Expect: 100-continue and the origin answers before reading the... CVE-2025-55702
- Élevée 9.1 Apache Traffic Server can return an origin connection to the shared pool while the origin is... CVE-2025-31699
- Élevée 8.8 Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close... CVE-2026-111804
- Critique 10.0 Apache Traffic Server's experimental magick plugin lets an unauthenticated client control... CVE-2026-111813
- Élevée 7.7 The Pulsar Packages Management Service can be configured to store packages on the local... CVE-2026-105945
- Critique 10.0 Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own... CVE-2026-105944
- Élevée 7.7 When a configured proxy role sends a request to the broker on behalf of another user (the... CVE-2026-105942
- Faible 2.3 Apache Pulsar namespaces can restrict which roles may use a subscription, either with the Prefix... CVE-2026-105938
- Élevée 8.7 Apache Pulsar shadow topics (PIP-180) are topics that read the stored messages of a source topic... CVE-2026-105937
- Moyenne 5.3 The Pulsar Functions worker REST API provides two endpoints that return the catalog of Pulsar IO... CVE-2026-105936
- Moyenne 4.9 The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which... CVE-2026-105935
- Élevée 7.2 The Apache Pulsar broker admin REST API provides a truncate operation for persistent topics ... CVE-2026-105934
- Faible 2.3 Apache Pulsar allows an administrator to require end-to-end message encryption for all topics in... CVE-2026-105933
- Faible 2.3 The Apache Pulsar broker admin REST API provides endpoints to read, set and remove the topic... CVE-2026-105932
- Faible 2.3 The Apache Pulsar broker exposes a transaction administration REST API under /admin/v3... CVE-2026-105931
- Moyenne 6.0 When package management is enabled, Pulsar Functions, Sources and Sinks can be registered or... CVE-2026-105930
- Faible 2.3 The Apache Pulsar WebSocket service allows a WebSocket consumer to configure a dead letter policy... CVE-2026-105927