ROOT-OS-UBUNTU-2404-CVE-2021-3864 CVE-2021-3864 in rootio-linux - Patched by Root

Root has patched CVE-2021-3864 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2021-3864 CVE-2021-3864 in rootio-linux - Patched by Root

Root has patched CVE-2021-3864 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2021-3864 CVE-2021-3864 in rootio-linux - Patched by Root

Root has patched CVE-2021-3864 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

1byte-react-design (>=1.7.1 <=1.14.0), @2nova/wu-ui (>=1.1.0 <=1.3.12) +1750 more potentially affected by unknown CVE via @antv/coord (>=0.0.3 <=0.4.7)

@antv/coord NPM version =0.0.3, =1.7.1, =1.1.0, =0.1.1, =0.1.1, =0.1.0, =0.0.2, =0.1.2, =1.0.1, =0.1.0, =0.5.0-alpha.0, =0.1.0, =0.5.0-alpha.0, =0.5.0-alpha.0, =0.1.0, =0.5.0-alpha.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2026-3864...

MINI-74Q8-3864-FJCH

Bulletin has no description...

MINI-3864-JW9F-M96C

Bulletin has no description...

CVE-2026-3864

CVE-2026-3864 affects the Kubernetes CSI Driver for NFS (csi-driver-nfs). The vulnerability arises from insufficient validation of the subDir parameter in volume identifiers, enabling path traversal (../) when creating PersistentVolumes and during volume deletion/cleanup. An attacker with PV crea...

CVE-2026-3864 CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server

A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated. Attackers with the ability to create PersistentVolumes referencing the NFS CSI driver could craft volume identifiers containing path traversal sequenc...

SUSE CVE-2026-3864

A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated. Attackers with the ability to create PersistentVolumes referencing the NFS CSI driver could craft volume identifiers containing path traversal sequenc...

CVE-2026-3864

creationtimestamp| type| source ---|---|--- 2026-03-17 12:56:04+00:00| seen| https://bsky.app/profile/kubernetes.dev/post/3mhazhsixfh2h 2026-03-17 15:06:21+00:00| seen| https://bsky.app/profile/kubernetes.io/post/3mhbaqsbtjc2d 2026-03-18 02:28:39+00:00| seen|...

Oracle Linux 10 : delve (ELSA-2026-3864)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-3864 advisory. 1.25.2-2.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.25.2-2 - Rebuild with latest Go Tenable has extracted the preceding...

EUVD-2026-3864

Missing Authorization vulnerability in Select-Themes Don Peppe donpeppe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Don Peppe: from n/a through = 1.3...

MiracleLinux 8 : thunderbird-115.10.0-2.el8_9.ML.1 (AXSA:2024-7726:10)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-7726:10 advisory. Mozilla: Denial of Service using HTTP/2 CONTINUATION frames CVE-2024-3302 Tenable has extracted the preceding description block directly from the...

CVE-2021-3864 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-vmware...

CVE-2024-3864

creationtimestamp| type| source ---|---|--- 2025-10-02 15:37:34+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m27v3oiq4k27...

Linux Distros Unpatched Vulnerability : CVE-2016-3864

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Qualcomm radio interface layer in Android before 2016-09-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain...

GO-2025-3864 Mattermost Confluence Plugin has Missing Authorization vulnerability in github.com/mattermost/mattermost-plugin-confluence

Mattermost Confluence Plugin has Missing Authorization vulnerability in github.com/mattermost/mattermost-plugin-confluence...

CVE-2025-3864

Hackney fails to properly release HTTP connections to the pool after handling 307 Temporary Redirect responses. Remote attackers can exploit this to exhaust connection pools, causing denial of service in applications using the library. Fix for this issue has been included in 1.24.0 release...

CVE-2025-3864

creationtimestamp| type| source ---|---|--- 2025-05-28 12:13:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqa6ig6quww2 2025-05-28 15:47:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqakg7bsja2o...

CVE-2025-3864 Connection pool exhaustion in hackney

Hackney fails to properly release HTTP connections to the pool after handling 307 Temporary Redirect responses. Remote attackers can exploit this to exhaust connection pools, causing denial of service in applications using the library. Fix for this issue has been included in 1.24.0 release...