CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-86146Apache bRPC: HTTP Request Smuggling and Header Injection via Lenient HTTP/1.1 Header ParsingApache Software Foundation Apache bRPC
- CVE-2026-114243dhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli_query sql injectiondhikshitha29 Insurance-Management-System
- CVE-2026-84748Apache bRPC: Builtin services reachable from the public port via protobuf protocols despite ServerOptions.internal_port configurationApache Software Foundation Apache bRPC
- CVE-2026-84747Apache bRPC: Access Control Bypass via HTTP Request Paths Containing Empty Path SegmentsApache Software Foundation Apache bRPC
- CVE-2026-84727Apache bRPC: Use-After-Free in RTMP Chunk Stream Handling via Abort MessageApache Software Foundation Apache bRPC
- CVE-2026-82953Apache bRPC: NULL Pointer Dereference in RTMP createStream Error Path Leading to Remote Denial of ServiceApache Software Foundation Apache bRPC
- CVE-2026-82942Apache bRPC: Race Condition on the Shared Socket Input Buffer in the RDMA Transport Causes Remote Denial of ServiceApache Software Foundation Apache bRPC
- CVE-2026-82425Apache bRPC: Reachable Assertion in Socket::OnInputEvent Allows Remote Denial of ServiceApache Software Foundation Apache bRPC
- CVE-2026-82231Apache bRPC: Malformed Thrift T_EXCEPTION reply causes process termination in Thrift clientApache Software Foundation Apache bRPC
- CVE-2026-82230Apache bRPC: Stack Exhaustion via Unbounded Recursion in mcpack2pb ParserApache Software Foundation Apache bRPC
- CVE-2026-82210Apache bRPC: Remote denial of service (crash) via malformed stream feedback framesApache Software Foundation Apache bRPC
- CVE-2026-114407e107 CMS before 2.3.13 Reflected XSS via search.php author Parametere107inc e107
- CVE-2026-81755Apache bRPC: Uncontrolled Resource Consumption via Excessive Streams in a Single RPC RequestApache Software Foundation Apache bRPC
- CVE-2026-80463Apache bRPC: Unbounded Memory Accumulation in Stream Message ReassemblyApache Software Foundation Apache bRPC
- CVE-2026-79704Apache bRPC: Out-of-bounds Read in Multi-stream RPC Response HandlingApache Software Foundation Apache bRPC
- CVE-2026-78334Apache bRPC: Missing Authentication for Streaming RPC FramesApache Software Foundation Apache bRPC
- CVE-2026-78066Apache bRPC: Resource Exhaustion via Unbounded Decompression and Unvalidated Wire-Declared SizesApache Software Foundation Apache bRPC
- CVE-2026-78058Apache bRPC: Unbounded Resource Consumption and Crash in the HTTP/2 Receive PathApache Software Foundation Apache bRPC
- CVE-2026-78048Apache bRPC: Remote Denial of Service via Out-of-Bounds Dynamic Table Sizing in HPACK DecoderApache Software Foundation Apache bRPC
- CVE-2026-74758Apache bRPC: Heap Use-After-Free in RTMP Abort Message HandlingApache Software Foundation Apache bRPC
- CVE-2026-74757Apache bRPC: Uncontrolled Memory Allocation via Malicious mcpack Array Item CountApache Software Foundation Apache bRPC
- CVE-2026-74755Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of ServiceApache Software Foundation Apache bRPC
- CVE-2026-114242dhikshitha29 Insurance-Management-System editPlan.php mysqli_query sql injectiondhikshitha29 Insurance-Management-System
- CVE-2026-66392Apache bRPC: TLS Client Accepts Certificates for Mismatched Peer NamesApache Software Foundation Apache bRPC
- CVE-2026-61916Apache bRPC: Out-of-bounds Read in URL and Header Lookup Tables on Unsigned-char PlatformsApache Software Foundation Apache bRPC
- CVE-2026-61902Apache bRPC: Memory Exhaustion Through Inconsistent Message Body LimitsApache Software Foundation Apache bRPC
- CVE-2026-58064Apache bRPC: Denial of Service via Unbounded Redis Inline Command AllocationApache Software Foundation Apache bRPC
- CVE-2026-56388Apache bRPC: Out-of-Bounds Write in Redis Command ParserApache Software Foundation Apache bRPC
- CVE-2026-56387Apache bRPC: Remote Memory Exhaustion in RTMP AMF ParserApache Software Foundation Apache bRPC
- CVE-2026-56386Apache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame ParserApache Software Foundation Apache bRPC