436 matches found
DIAFAN.CMS Information Disclosure
The vulnerability in the DIAFAN.CMS content management system is related to information disclosure during data transmission. Exploitation of this vulnerability could allow a remote attacker to expose protected information...
Elph Mobile Unencrypted Data Transmission
The vulnerability in the Elph Mobile unified communications platform is related to the transmission of data in an open format. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality and integrity of protected information...
http-stalling-detector
HTTP Stalling Detector HTTP stalling DoS attacks take advantage of an inability for webservers to determine if a remote client is just connected over a slow link or if the remote client is deliberately sending data very slowly to avoid the webserver doing a timeout and shutting down the connectio...
CLEANSTART-2026-ZM16945 When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and t...
Security vulnerability affects the activemq package. When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and transmit attacker-controlled data...
Red Hat: CVE-2026-92389: curl: curl: TFTP direction confusion
libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a download request in a way that forces the client into transmit mode,...
PT-2026-117849
Security vulnerability affects the activemq package. When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and transmit attacker-controlled data...
ROS-20261001-73-0041
The vulnerability in rclone relates to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
CVE-2026-97523
In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mssnow reset to 0 for a...
DEBIAN-CVE-2026-97523
In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mssnow reset to 0 for a...
AZL-104618 CVE-2026-97523 affecting package kernel for versions less than 6.6.158.1-1
In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mssnow reset to 0 for a...
EUVD-2026-86831
In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mssnow reset to 0 for a...
CVE-2026-97523
The Linux kernel is affected by a race condition within the mptcp component. Specifically, the mptcp scheduler may race with a subflow sockets state change , causing data transmission on a selected socket to fail. This failure can lead to a subsequent release attempting to use mss_now reset to 0 ...
ROS-20260921-73-0036
The vulnerability in curl is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
Linux Kernel Information Disclosure
The kernel vulnerability in the Linux operating system is related to information disclosure during data transmission. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
IBM Sterling B2B Integrator Information Disclosure
The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file gateway software relates to the disclosure of information during data transmission. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...
Malicious code in easypanel-core (npm)
Source: amazon-inspector 4cb013a465c19126feba2006a81f33d65cc64b269e3da8ffe4e8284c7defa3cc easypanel-core ships an inert module.exports = main and places all functionality in a preinstall lifecycle script. On npm install, preinstall.js collects os.hostname, os.userInfo.username, process.cwd, and t...
CVE-2026-58301: Server-Side Request Forgery (SSRF)
When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and transmit attacker-controlled data. This vulnerability affects Apache Shiro versions 2.x through 3.0.0...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: rxrpc: Fixed the handling of a reply packet before data transmission. rxrpcreceivingreply was fixed to handle the reception of a reply packet before rxrpc has a chance to send any request DATA packets during a client call. Thi...
MSC-2026-10427
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
CVE-2026-74429 rxrpc: Fix the reception of a reply packet before data transmission
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the reception of a reply packet before data transmission Fix rxrpcreceivingreply to handle the reception of an apparent reply DATA packet before rxrpc has had a chance to send any request DATA packets on a client call ...