7497 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: dm: removed the fake timeout to avoid leaking requests. Since commit 15f73f5b3e59 “blk-mq: moved failure injection out of blkmqcompleterequest”, drivers are responsible for calling blkshouldfaketimeout at appropriate code paths a...
Astra Linux – Vulnerability in docker.io-app
Moby version 25.0.3 has a race condition vulnerability in the StreamFormatter package. This vulnerability can be exploited to trigger multiple concurrent write operations, leading to data corruption or application crashes...
ROOT-APP-MAVEN-CVE-2026-55470 CVE-2026-55470 in ca.uhn.hapi.fhir:org.hl7.fhir.validation - Patched by Root
Root has patched CVE-2026-55470 in the ca.uhn.hapi.fhir:org.hl7.fhir.validation package for Root:Maven. Multiple fixed versions available...
[SECURITY] [DLA 4821-1] perl security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4821-1 [email protected] https://www.debian.org/lts/security/ Arnaud Rebillout October 05, 2026 https://wiki.debian.org/LTS -...
Debian dla-4821 : libperl-dev - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4821 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4821-1 [email protected]...
PT-2026-106272
Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.30.0 Description A partial denial of service issue exists in the OpenAI-compatible chat endpoint. A remote caller can provide large values for the fps and max frames variables within the media io kwargs field while...
undertow-io__undertow_CVE-2014-7816_1-0-16-Final
Undertow Undertow è un server web Java basato su I/O non bloccante. È composto da alcune parti differenti: Un core del server HTTP che supporta sia I/O bloccante che non bloccante Un'implementazione di Servlet 3.1 Un'implementazione di web socket conforme a JSR-356 Sito web: http://undertow.io...
[SECURITY] Fedora 45 Update: Io-language-20170906-30.fc45
Io is a small, prototype-based programming language. The ideas in Io are mostly inspired by Smalltalk all values are objects, Self prototype-based, NewtonScript differential inheritance, Act1 actors and futures for concurrency, LISP code is a runtime inspectable/modifiable tree and Lua small,...
EUVD-2026-91073
Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations. This issue affects Easy IO Neo: before 3.3b63...
CVE-2026-64892
Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations. This issue affects Easy IO Neo: before 3.3b63...
CVE-2026-64892
Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations. This issue affects Easy IO Neo: before 3.3b63...
CVE-2026-64892
Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations. This issue affects Easy IO Neo: before 3.3b63...
CVE-2026-64892
The Johnson Controls Easy IO Neo (specifically EC and CW Controllers ) is vulnerable to an Exposure of Sensitive Information vulnerability affecting versions before 3.3b63 . The flaw allows an attacker to collect data from common resource locations, potentially providing access to sensitive infor...
GO-2026-6583 Klever-Go: /log controls global node logging in github.com/klever-io/klever-go
Klever-Go: /log controls global node logging in github.com/klever-io/klever-go...
GO-2026-6582 Klever-Go Account takeover: `kleverUpdateAccountPermission` authorizes on attacker-controlled `RecipientAddr` instead of the authenticated caller in github.com/klever-io/klever-go
Klever-Go Account takeover: kleverUpdateAccountPermission authorizes on attacker-controlled RecipientAddr instead of the authenticated caller in github.com/klever-io/klever-go...
CVE-2026-27872
Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows Brute Force. This issue affects Easy IO FG: before 2.0b52...
ROOT-APP-MAVEN-CVE-2026-42498 CVE-2026-42498 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-42498 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
CVE-2026-27872 EasyIO FG
Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows Brute Force. This issue affects Easy IO FG: before 2.0b52...