2026

Inefficient regular expression complexity, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua binding

Uncontrolled Recursion, Allocation of resources without limits or throttling vulnerability in Apache Thrift Erlang bindi

Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: bef

Missing release of memory after effective lifetime vulnerability in Apache Thrift c++ bindings. This issue affects Ap

Allocation of resources without limits or throttling vulnerability in Apache Thrift dart bindings. This issue affects

Uncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object pro

Allocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings. This issue affects

Improper handling of highly compressed data (data amplification) vulnerability in Apache Thrift Go bindings. This iss

Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Im

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This

Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thri

NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0

Uncaught exception, Loop with unreachable exit condition ('infinite loop'), Integer underflow (wrap or wraparound) vulne

Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift

Loop with unreachable exit condition ('infinite loop'), Improperly controlled modification of object prototype attribute

Improper Validation of Certificate with Host Mismatch in the C++ and D libraries of Apache Thrift. Both libraries ins

Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This iss

Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift pe

Integer underflow (wrap or wraparound), Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport.

Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apach

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer. This

A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61

YesWiki before 4.5.3 contains multiple reflected cross-site scripting vulnerabilities that allow remote attackers to inj

YesWiki before 4.6.7 contains a missing authorization vulnerability in the attachment download handler that allows unaut

YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that allows authenticated admins to write remote

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows page editors to make the server fe

YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions be

YesWiki before 4.6.7 contains an insufficient session expiration vulnerability that allows attackers to reuse old passwo

YesWiki before 4.6.7 contains an authorization bypass vulnerability in ApiService::isAuthorized() that allows unauthenti

YesWiki before 4.6.7 contains a stored cross-site scripting vulnerability in formatters/wakka.php that allows users who

YesWiki before 4.6.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to in

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigg

YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar nuagetag action, which concatenates the unesca

YesWiki before 4.6.7 contains a stored cross-site scripting vulnerability in the Bazar FileField, which validates only t

YesWiki before 4.6.7 contains a blind SQL injection vulnerability in the {{newtextsearch}} action because Bazar list opt

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in WebfingerService that allows unauthenticate

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in validateKeyIdUrl() that allows unauthentica

YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar filtertags action, which wraps unescaped filte

YesWiki before 4.6.7 contains a second-order SQL injection vulnerability in AclService::updateRequestWithACL, where a st

YesWiki before 4.6.7 contains an access control bypass vulnerability that allows unauthenticated attackers to read restr

YesWiki before 4.6.7 contains an algorithmic-complexity denial of service in the wakka.php formatter due to an O(n^2) ma

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the admintag action that allows attackers to

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the filemanager page handler, which deletes

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in RevisionsHandler that allows attackers to re

YesWiki before 4.6.7 contains a missing authorization flaw in the pointimage action (tools/attach/actions/pointimage.php

YesWiki before 4.6.7 contains an access control vulnerability allowing unauthenticated attackers to overwrite any existi

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the ajaxdeletepage handler, which permanentl

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the autoupdate UpdateAction that allows atta

YesWiki before 4.6.7 contains an authentication bypass in the contact mail AJAX handler that allows unauthenticated atta