Skip to content
Fencer Intel

All · bitnami

Newest first, late arrivals on top. Also a feed.

  1. 7.5
    CVE-2026-7262 NULL pointer dereference in SOAP apache:Map decoder with missing <value>
    PHPbitnami
  2. 9.8
    CVE-2026-7261 SoapServer session-persisted object use-after-free via SOAP header fault
    PHPbitnami
  3. 6.5
    CVE-2026-7259 Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
    PHPbitnami
  4. 6.1
    CVE-2026-6735 XSS within PHP-FPM status endpoint
    PHPbitnami
  5. 7.7
    CVE-2026-6722 Use-After-Free in SOAP using Apache map
    PHPbitnami
  6. 7.5
    CVE-2026-7258 Out-of-bounds read in urldecode() on NetBSD
    PHPbitnami
  7. 8.2
    CVE-2026-6104 Global buffer over-read in mb_convert_encoding() with attacker-supplied encoding
    PHPbitnami
  8. 8.1
    CVE-2025-14179 SQL injection in pdo_firebird via NUL bytes in quoted strings
    PHPbitnami
  9. 7.5
    CVE-2026-7568 Signed integer overflow in metaphone()
    PHPbitnami
  10. 7.5
    CVE-2026-7263 DoS attack via DOMNode::C14N()
    PHPbitnami
  11. 6.5
    CVE-2026-8063 Post-auth null pointer dereference when aggregating against a view with empty search pipeline
    MongoDBbitnami
  12. 0.0
    CVE-2026-44283 etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks
    gobitnami
  13. 9.6
    CVE-2026-42880 ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction
    gobitnami
  14. 6.1
    CVE-2026-44245 Kyverno: [policy-reporter-ui] XSS via Stored Property Values in PropertyCard Component
    gobitnami
  15. 6.1
    CVE-2026-44903 Prometheus: Stored XSS via crafted histogram bucket label values in the heatmap display of the old Prometheus web UI
    gobitnami
  16. 9.8
    CVE-2026-28780 Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()
    Apache HTTP Serverbitnami
    EPSS 1.4% chance of exploitation in 30 days, percentile 72%
  17. 5.9
    CVE-2026-43930 Parse Server: MFA SMS one-time password accepted twice under concurrent login
    npmbitnami
  18. 7.5
    CVE-2026-42186 OpenBao's Namespace Deletion May Not Delete Data Properly
    gobitnami
  19. 7.5
    CVE-2026-30923 libModSecurity3 denial of service via segfault when using t:hexDecode on single-character query strings
    bitnami
  20. 5.4
    CVE-2026-40864 JupyterHub: Cross-origin form POSTs bypass XSRF
    pypibitnami
  21. 8.8
    CVE-2026-25589 RedisBloom RESTORE invalid memory access may allow remote code execution
    Redisbitnami
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  22. 8.8
    CVE-2026-25588 RedisTimeSeries RESTORE invalid memory access may allow remote code execution
    Redisbitnami
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  23. 6.5
    CVE-2026-35192 Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST
    Djangopypibitnami
  24. 4.3
    CVE-2026-6907 Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware
    Djangopypibitnami
  25. 5.3
    CVE-2026-5766 Potential denial-of-service vulnerability in ASGI requests via file upload limit bypass
    Djangopypibitnami
  26. 8.8
    CVE-2026-25243 redis-server RESTORE invalid memory access may allow remote code execution
    Redisbitnami
    EPSS 4.0% chance of exploitation in 30 days, percentile 90%
  27. 8.8
    CVE-2026-23631 redis-server Lua use-after-free may allow remote code execution
    Redisbitnami
    EPSS 3.1% chance of exploitation in 30 days, percentile 87%
  28. 7.5
    CVE-2026-23479 redis-server use-after-free in unblock client flow may allow remote code execution
    Redisbitnami
    EPSS 2.6% chance of exploitation in 30 days, percentile 85%
  29. 7.3
    CVE-2026-29168 Apache HTTP Server: mod_md unrestricted OCSP response
    Apache HTTP Serverbitnami
  30. 7.5
    CVE-2026-43868 Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern
    crates.iobitnami