CVE Vulnerability Database
Search and browse 381,887 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-58181 | HIGH | 8.2 | 0.4% | Jul 29, 2026 | The Apache Traffic Server uri_signing and url_sig plugins can exhaust the stack or crash on attacker input. This issue ... |
| CVE-2026-58180 | HIGH | 8.2 | 0.4% | Jul 29, 2026 | The Apache Traffic Server txn_box plugin overflows the stack from attacker-controlled input. This issue affects Apache ... |
| CVE-2026-58179 | CRITICAL | 9.8 | 0.4% | Jul 29, 2026 | The Apache Traffic Server regex_remap plugin overflows the stack and integers from substitution input. This issue affec... |
| CVE-2026-58178 | HIGH | 8.2 | 0.4% | Jul 29, 2026 | The Apache Traffic Server ESI plugin can recurse without bound and fetch attacker-controlled URLs. This issue affects A... |
| CVE-2026-58177 | CRITICAL | 9.8 | 0.3% | Jul 29, 2026 | The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This is... |
| CVE-2026-58175 | HIGH | 8.2 | 0.4% | Jul 29, 2026 | Apache Traffic Server leaks memory when handling HostDB SRV records. This issue affects Apache Traffic Server: from 8.0... |
| CVE-2026-58164 | HIGH | 8.3 | 0.4% | Jul 29, 2026 | Apache Traffic Server has use-after-free and time-of-check/time-of-use errors in remap configuration handling. This iss... |
| CVE-2026-58163 | CRITICAL | 9.1 | 0.4% | Jul 29, 2026 | Apache Traffic Server mishandles on-disk cache fields and object lifetimes, corrupting state or crashing. This issue af... |
| CVE-2026-58162 | CRITICAL | 10 | 0.2% | Jul 29, 2026 | The Apache Traffic Server certifier plugin generates certificates based on attacker-controlled client SNI. This issue a... |
| CVE-2026-58161 | CRITICAL | 9.2 | 0.4% | Jul 29, 2026 | Apache Traffic Server can crash from null dereferences and dangling references in TLS and SNI handling. This issue affe... |
| CVE-2026-58160 | MEDIUM | 6.5 | 0.4% | Jul 29, 2026 | Apache Traffic Server reads out of bounds while parsing DNS answers. This issue affects Apache Traffic Server: from 8.0... |
| CVE-2026-58159 | HIGH | 8.2 | 0.4% | Jul 29, 2026 | Apache Traffic Server can bypass IP access controls on UDS listeners and through ACL matching errors. This issue affect... |
| CVE-2026-58158 | HIGH | 8.2 | 0.4% | Jul 29, 2026 | Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects A... |
| CVE-2026-58157 | HIGH | 8.7 | 0.3% | Jul 29, 2026 | Apache Traffic Server can reuse server sessions and tunnels improperly, exposing data across client connections. This i... |
| CVE-2026-50622 | HIGH | 8.8 | 0.3% | Jul 29, 2026 | Description: Missing Authorization in Apache Atlas. A missing authorization vulnerability in Apache Atlas's admin endpoi... |
| CVE-2026-23904 | HIGH | 7.3 | 0.3% | Jul 29, 2026 | Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP requests to that destination. A re... |
| CVE-2026-18207 | MEDIUM | 6.5 | 0.3% | Jul 29, 2026 | A flaw was found in the client policy enforcement mechanism of Keycloak. The issue occurs when the system checks group m... |
| CVE-2026-18201 | MEDIUM | 5.5 | 0.3% | Jul 29, 2026 | Keycloak provides a way to manage identity providers and organizations through its administrative API. A flaw was discov... |
| CVE-2025-10656 | CRITICAL | 9.8 | 0.5% | Jul 29, 2026 | The Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin for WordPress is vulnerable to Missing Au... |
| CVE-2026-9720 | MEDIUM | 4.3 | 0.1% | Jul 29, 2026 | The Facturación Electrónica Costa Rica plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions ... |
| CVE-2026-65325 | MEDIUM | 6.3 | 0.1% | Jul 29, 2026 | Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the n... |
| CVE-2026-65324 | HIGH | 8.2 | 0.3% | Jul 29, 2026 | Apache Traffic Server drops the per-stream buffer cap when dechunking HTTP/2 or HTTP/3 responses, letting a slow client ... |
| CVE-2026-64557 | HIGH | 8.8 | 0.2% | Jul 29, 2026 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_... |
| CVE-2026-64556 | HIGH | 7.8 | 0.1% | Jul 29, 2026 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during remove_on_exe... |
| CVE-2026-58156 | MEDIUM | 6.3 | 0.1% | Jul 29, 2026 | Apache Traffic Server mis-parses ports in URLs and userinfo, allowing port-based access-control bypass. This issue affe... |