🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-94653 Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recom... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-94652 Missing release of memory after effective lifetime vulnerability in Apache Thrift c++ bindings.
This issue affects Apache Thrift: before 0.25.0.
... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-94648 Allocation of resources without limits or throttling vulnerability in Apache Thrift dart bindings.
This issue affects Apache Thrift: before 0.25.0.... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-94646 Uncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object prototype attributes ('proto... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-94638 Allocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings.
This issue affects Apache Thrift: before 0.25.0.
... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-94637 Improper handling of highly compressed data (data amplification) vulnerability in Apache Thrift Go bindings.
This issue affects Apache Thrift: befo... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-94636 Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-92834 Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server.
This issue affects Apache Thrift: b... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-104609 A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function g... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-90440 Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-87117 NULL pointer dereference vulnerability in Apache Thrift PHP bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to ... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-86537 Uncaught exception, Loop with unreachable exit condition ('infinite loop'), Integer underflow (wrap or wraparound) vulnerability in Apache T... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-86536 Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift all JS bindings.
... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-104473 YesWiki before 4.5.3 contains multiple reflected cross-site scripting vulnerabilities that allow remote attackers to inject JavaScript through unsanit... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-104472 YesWiki before 4.6.7 contains a missing authorization vulnerability in the attachment download handler that allows unauthenticated attackers to bypass... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-104471 YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that allows authenticated admins to write remote files into the web-accessible... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-104470 YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows page editors to make the server fetch arbitrary URLs via the url... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-104469 YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions because login does not regenerat... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-104468 YesWiki before 4.6.7 contains an insufficient session expiration vulnerability that allows attackers to reuse old password reset links because tokens ... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-104467 YesWiki before 4.6.7 contains an authorization bypass vulnerability in ApiService::isAuthorized() that allows unauthenticated attackers to call admin-... | CRITICAL | ????? | ????? | NVD | 5 days ago |