16 matches found
[SECURITY] [DLA 4706-1] ruby-rack security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4706-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA July 31, 2026 https://wiki.debian.org/LTS -...
CVE-2026-34786 vulnerabilities
Vulnerabilities for packages: ruby4.0-rack, ruby3.2-rack, ruby3.4-rack, kube-fluentd-operator, ruby3.3-rack, logstash...
CVE-2026-34786 vulnerabilities
Vulnerabilities for packages: gitlab-cng, gitlab-rails-ce, logstash, ruby3.2-rack, ruby4.0-rack, ruby3.2-rails, gitlab-rails-ce-fips, ruby3.4-rails, ruby3.3-rack, kube-fluentd-operator, ruby3.4-rack, pact-broker-docker-fips, pact-broker-docker...
Linux Distros Unpatched Vulnerability : CVE-2026-34786
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Staticapplicablerules evaluates several headerrules types agains...
CVE-2026-34786 Rack: Rack::Static header_rules bypass via URL-encoded paths
Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Staticapplicablerules evaluates several headerrules types against the raw URL-encoded PATHINFO, while the underlying file-serving path is decoded before the file is served. As a result, a request for a...
CVE-2026-34786
Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Staticapplicablerules evaluates several headerrules types against the raw URL-encoded PATHINFO, while the underlying file-serving path is decoded before the file is served. As a result, a request for a...
CVE-2026-34786
Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Staticapplicablerules evaluates several headerrules types against the raw URL-encoded PATHINFO, while the underlying file-serving path is decoded before the file is served. As a result, a request for a...
CVE-2024-34786
UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone not using UniFi Network Application that could cause the SSID name to change and/or the WiFi Password to be removed on the 5GHz Radio. This vulnerability is fixed in UniFi iOS app...
CVE-2024-34786
creationtimestamp| type| source ---|---|--- 2024-07-09 04:42:37+00:00| seen| https://t.me/cvedetector/224...
CVE-2024-34786
UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone not using UniFi Network Application that could cause the SSID name to change and/or the WiFi Password to be removed on the 5GHz Radio. This vulnerability is fixed in UniFi iOS app...
CVE-2022-34786
creationtimestamp| type| source ---|---|--- 2022-06-30 22:38:54+00:00| seen| https://t.me/cibsecurity/45437...
CVE-2022-34786
CVE-2022-34786 affects Jenkins Rich Text Publisher Plugin (versions 1.4 and earlier). The issue is that the plugin does not escape the HTML in the message set by its post-build step, causing stored cross-site scripting (XSS) when an attacker can configure jobs. The Red Hat and other connected doc...
CVE-2021-34786
creationtimestamp| type| source ---|---|--- 2021-09-09 12:29:15+00:00| seen| https://t.me/cibsecurity/28544...
CVE-2021-34786
Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system...
CVE-2021-34786
Cisco BroadWorks CommPilot Application Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system. The CVE-2021-34786 entry maps to Cisco BroadWorks CommPilot issues; Cisco’s adv...