Apache Community
25 kredili kayıt · son 12 ayda 25 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
25İzleyin | CVE-2026-65100İstismar yok | Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encodeapache · traffic server · CWE-696 | Orta6,3 | — | %0,6 | 29 Tem 2026 |
33İzleyin | CVE-2026-58188İstismar yok | Apache Traffic Server: Memory-safety and limit-bypass errors across experimental pluginsapache · traffic server · CWE-787 | Yüksek8,4 | — | %0,8 | 29 Tem 2026 |
32İzleyin | CVE-2026-58181İstismar yok | Apache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crashapache · traffic server · CWE-121 | Yüksek8,2 | — | %0,7 | 29 Tem 2026 |
32İzleyin | CVE-2026-58180İstismar yok | Apache Traffic Server: txn_box plugin overflows the stack from attacker inputapache · traffic server · CWE-121 | Yüksek8,2 | — | %0,7 | 29 Tem 2026 |
36İzleyin | CVE-2026-58179İstismar yok | Apache Traffic Server: regex_remap plugin overflows the stack from attacker inputapache · traffic server · CWE-121 | Kritik9,2 | — | %0,6 | 29 Tem 2026 |
32İzleyin | CVE-2026-58178İstismar yok | Apache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgeryapache · traffic server · CWE-674 | Yüksek8,2 | — | %0,7 | 29 Tem 2026 |
33İzleyin | CVE-2026-58177İstismar yok | Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts frameworkapache · traffic server · CWE-787 | Yüksek8,3 | — | %0,6 | 29 Tem 2026 |
33İzleyin | CVE-2026-58164İstismar yok | Apache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-freeapache · traffic server · CWE-416 | Yüksek8,3 | — | %0,7 | 29 Tem 2026 |
33İzleyin | CVE-2026-58163İstismar yok | Apache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the serverapache · traffic server · CWE-502 | Yüksek8,3 | — | %0,7 | 29 Tem 2026 |
25İzleyin | CVE-2026-58160İstismar yok | Apache Traffic Server: Out-of-bounds reads while parsing DNS responsesapache · traffic server · CWE-125 | Orta6,3 | — | %0,6 | 29 Tem 2026 |
28İzleyin | CVE-2026-58159İstismar yok | Apache Traffic Server: Listener and ACL handling allow access-control bypassapache · traffic server · CWE-863 | Yüksek7,0 | — | %0,6 | 29 Tem 2026 |
32İzleyin | CVE-2026-58158İstismar yok | Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflowapache · traffic server · CWE-121 | Yüksek8,2 | — | %0,6 | 29 Tem 2026 |
27İzleyin | CVE-2026-58157İstismar yok | Apache Traffic Server: Improper server-session reuse can expose data across client connectionsapache · traffic server · CWE-200 | Orta6,9 | — | %0,5 | 29 Tem 2026 |
25İzleyin | CVE-2026-65325İstismar yok | Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verificationapache · traffic server · CWE-295 | Orta6,3 | — | %0,3 | 29 Tem 2026 |
32İzleyin | CVE-2026-65324İstismar yok | Apache Traffic Server: HTTP/2 and HTTP/3 dechunking removes per-stream buffer cap, allowing memory exhaustionapache · traffic server · CWE-400 | Yüksek8,2 | — | %0,7 | 29 Tem 2026 |
25İzleyin | CVE-2026-58156İstismar yok | Apache Traffic Server: URL and port parsing errors allow access-control bypassapache · traffic server · CWE-863 | Orta6,3 | — | %0,4 | 29 Tem 2026 |
36İzleyin | CVE-2026-58154İstismar yok | Apache Traffic Server: Memory-safety errors in MIME and header parsingapache · traffic server · CWE-787 | Kritik9,2 | — | %0,5 | 29 Tem 2026 |
25İzleyin | CVE-2026-58153İstismar yok | Apache Traffic Server: HTTP/2 to HTTP/1 conversion forwards origin trailers to clients unsafelyapache · traffic server · CWE-444 | Orta6,3 | — | %0,6 | 29 Tem 2026 |
27İzleyin | CVE-2026-58152İstismar yok | Apache Traffic Server: Integer-handling errors in HPACK/XPACK decoding corrupt memoryapache · traffic server · CWE-190 | Orta6,9 | — | %0,6 | 29 Tem 2026 |
34İzleyin | CVE-2026-58151İstismar yok | Apache Traffic Server: Abusive HTTP/2 framing can exhaust resources and crash the serverapache · traffic server · CWE-400 | Yüksek8,7 | — | %0,7 | 29 Tem 2026 |
31İzleyin | CVE-2026-58150İstismar yok | Apache Traffic Server: HTTP/2 requests with Transfer-Encoding are not rejected, allowing request smugglingapache · traffic server · CWE-444 | Yüksek7,8 | — | %0,6 | 29 Tem 2026 |
28İzleyin | CVE-2026-57834İstismar yok | Apache Traffic Server: Malformed chunked message body allows request smugglingapache · traffic server · CWE-444 | Yüksek7,0 | — | %0,6 | 29 Tem 2026 |
28İzleyin | CVE-2026-41920İstismar yok | Apache Traffic Server: SNI to Host header matching policy is not properly enforcedapache · traffic server · CWE-284 | Yüksek7,0 | — | %0,5 | 29 Tem 2026 |
30İzleyin | CVE-2026-33267Kavram kanıtı | Apache Traffic Server: Untrusted @ headers can spoof ATS internal metadataapache · traffic server · CWE-20 | Yüksek7,7 | — | %0,6 | 29 Tem 2026 |
27İzleyin | CVE-2026-22068İstismar yok | Apache Traffic Server: Regex mappings match with malicious domain namesapache · traffic server · CWE-777 | Orta6,9 | — | %0,6 | 29 Tem 2026 |
- CVE-2026-6510025İzleyin
Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode
OrtaCVSS 6,3İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-5818833İzleyin
Apache Traffic Server: Memory-safety and limit-bypass errors across experimental plugins
YüksekCVSS 8,4İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-5818132İzleyin
Apache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crash
YüksekCVSS 8,2İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-5818032İzleyin
Apache Traffic Server: txn_box plugin overflows the stack from attacker input
YüksekCVSS 8,2İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-5817936İzleyin
Apache Traffic Server: regex_remap plugin overflows the stack from attacker input
KritikCVSS 9,2İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-5817832İzleyin
Apache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgery
YüksekCVSS 8,2İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-5817733İzleyin
Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework
YüksekCVSS 8,3İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-5816433İzleyin
Apache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free
YüksekCVSS 8,3İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-5816333İzleyin
Apache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the server
YüksekCVSS 8,3İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-5816025İzleyin
Apache Traffic Server: Out-of-bounds reads while parsing DNS responses
OrtaCVSS 6,3İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-5815928İzleyin
Apache Traffic Server: Listener and ACL handling allow access-control bypass
YüksekCVSS 7,0İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-5815832İzleyin
Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow
YüksekCVSS 8,2İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-5815727İzleyin
Apache Traffic Server: Improper server-session reuse can expose data across client connections
OrtaCVSS 6,9İstismar yokEPSS %0apache · traffic server29 Tem 2026
- CVE-2026-6532525İzleyin
Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification
OrtaCVSS 6,3İstismar yokEPSS %0apache · traffic server29 Tem 2026
- CVE-2026-6532432İzleyin
Apache Traffic Server: HTTP/2 and HTTP/3 dechunking removes per-stream buffer cap, allowing memory exhaustion
YüksekCVSS 8,2İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-5815625İzleyin
Apache Traffic Server: URL and port parsing errors allow access-control bypass
OrtaCVSS 6,3İstismar yokEPSS %0apache · traffic server29 Tem 2026
- CVE-2026-5815436İzleyin
Apache Traffic Server: Memory-safety errors in MIME and header parsing
KritikCVSS 9,2İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-5815325İzleyin
Apache Traffic Server: HTTP/2 to HTTP/1 conversion forwards origin trailers to clients unsafely
OrtaCVSS 6,3İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-5815227İzleyin
Apache Traffic Server: Integer-handling errors in HPACK/XPACK decoding corrupt memory
OrtaCVSS 6,9İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-5815134İzleyin
Apache Traffic Server: Abusive HTTP/2 framing can exhaust resources and crash the server
YüksekCVSS 8,7İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-5815031İzleyin
Apache Traffic Server: HTTP/2 requests with Transfer-Encoding are not rejected, allowing request smuggling
YüksekCVSS 7,8İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-5783428İzleyin
Apache Traffic Server: Malformed chunked message body allows request smuggling
YüksekCVSS 7,0İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-4192028İzleyin
Apache Traffic Server: SNI to Host header matching policy is not properly enforced
YüksekCVSS 7,0İstismar yokEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-3326730İzleyin
Apache Traffic Server: Untrusted @ headers can spoof ATS internal metadata
YüksekCVSS 7,7Kavram kanıtıEPSS %1apache · traffic server29 Tem 2026
- CVE-2026-2206827İzleyin
Apache Traffic Server: Regex mappings match with malicious domain names
OrtaCVSS 6,9İstismar yokEPSS %1apache · traffic server29 Tem 2026