Search CVE reports


Toggle filters

1 – 10 of 423 results


CVE-2026-5081

Medium priority
Needs evaluation

(Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 ...)

1 affected package

libapache-session-perl

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libapache-session-perl Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-42440

Medium priority
Needs evaluation

(OOM Denial of Service via Unbounded Array Allocation in Apache OpenNLP ...)

1 affected package

apache-opennlp

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
apache-opennlp Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-42027

Medium priority
Needs evaluation

(Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP Ext ...)

1 affected package

apache-opennlp

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
apache-opennlp Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-40682

Medium priority
Needs evaluation

(XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache ...)

1 affected package

apache-opennlp

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
apache-opennlp Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-34059

Low priority

Some fixes available 4 of 8

mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()

1 affected package

apache2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
apache2 Fixed Fixed Fixed Needs evaluation Needs evaluation
Show less packages

CVE-2026-34032

Low priority

Some fixes available 4 of 8

mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)

1 affected package

apache2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
apache2 Fixed Fixed Fixed Needs evaluation Needs evaluation
Show less packages

CVE-2026-33857

Low priority

Some fixes available 4 of 8

Off-by-one OOB reads in AJP getter functions

1 affected package

apache2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
apache2 Fixed Fixed Fixed Needs evaluation Needs evaluation
Show less packages

CVE-2026-33523

Low priority

Some fixes available 4 of 8

HTTP response splitting forwarding malicious status line

1 affected package

apache2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
apache2 Fixed Fixed Fixed Needs evaluation Needs evaluation
Show less packages

CVE-2026-33007

Low priority

Some fixes available 4 of 8

mod_authn_socache crash

1 affected package

apache2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
apache2 Fixed Fixed Fixed Needs evaluation Needs evaluation
Show less packages

CVE-2026-33006

Low priority

Some fixes available 4 of 8

mod_auth_digest timing attack

1 affected package

apache2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
apache2 Fixed Fixed Fixed Needs evaluation Needs evaluation
Show less packages