1771 matches found
ALPINE-CVE-2026-53796
rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the non-daemon receiver's destination directory handling that allows an attacker who can manipulate destination path parent components to redirect file writes to unintended locations. Attackers can...
CVE-2026-53796
CVE-2026-53796 concerns rsync versions before 3.5.0, where a TOCTOU race in the non-daemon receiver’s destination directory handling allows a local attacker to cause writes to land outside the intended destination tree by substituting a symlink for a destination path component between path resolu...
EUVD-2026-58035
rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the non-daemon receiver's destination directory handling that allows an attacker who can manipulate destination path parent components to redirect file writes to unintended locations. Attackers can...
CVE-2026-53796 rsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling
rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the non-daemon receiver's destination directory handling that allows an attacker who can manipulate destination path parent components to redirect file writes to unintended locations. Attackers can...
CVE-2026-53796
rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the non-daemon receiver's destination directory handling that allows an attacker who can manipulate destination path parent components to redirect file writes to unintended locations. Attackers can...
CVE-2026-53785
rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination directory tree by crafting relative paths with symlink components in --relative mode. The makepath function follows symlinks pointing outside the destination...
Denial Of Service (DoS)
Apache IoTDB is vulnerable to Denial Of Service DoS.The vulnerability is due to missing authentication and insufficient validation of attacker-controlled allocation sizes in the AirGap receiver, allowing unauthenticated attackers to trigger excessive memory allocation and exhaust JVM heap memory,...
Denial Of Service (DoS)
Apache IoTDB is vulnerable to Denial Of Service DoS. The vulnerability is due to uncontrolled recursion in the AirGap receiver's readLength method, where repeated E-language prefixes trigger unbounded recursive calls, allowing unauthenticated attackers to exhaust the JVM stack and cause a...
CVE-2026-17012 Restore PayPal Standard for WooCommerce <= 3.1.0 - Payment Bypass via Unvalidated receiver_email
The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not verify that the PayPal account which received a payment matches the merchant's configured account before marking the order as paid, allowing unauthenticated buyers to complete a WooCommerce order...
CVE-2026-17012
The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin (versions through 3.1.0 ) contains a payment bypass vulnerability. The flaw occurs because the plugin fails to verify if the PayPal account receiving a payment matches the merchant's configured account before marking a...
PT-2026-69469
Name of the Vulnerable Software and Affected Versions Grafana versions prior to 13.2.1 Description An authorization bypass allows a user with the Editor role to delete protected contact points receivers without possessing the necessary alert.notifications.receivers.protected:write permission. Thi...
CVE-2026-19206
A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiverstopThreadless of the file src/sampledvalues/svsubscriber.c of the component ASDU Element Handler. Performing a manipulation results in heap-based buffer overflow. The attack must be...
CVE-2026-19206 MZ Automation libiec61850 ASDU Element sv_subscriber.c SVReceiver_stopThreadless heap-based overflow
A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiverstopThreadless of the file src/sampledvalues/svsubscriber.c of the component ASDU Element Handler. Performing a manipulation results in heap-based buffer overflow. The attack must be...
CVE-2026-19206 MZ Automation libiec61850 ASDU Element sv_subscriber.c SVReceiver_stopThreadless heap-based overflow
A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiverstopThreadless of the file src/sampledvalues/svsubscriber.c of the component ASDU Element Handler. Performing a manipulation results in heap-based buffer overflow. The attack must be...
CVE-2026-19206
CVE-2026-19206 affects MZ Automation libiec61850 up to 1.6.1 , specifically the SVReceiver_stopThreadless function in the ASDU Element Handler (src/sampled_values/sv_subscriber.c). The issue is a heap-based buffer overflow caused by manipulation of the code path, with a local attack vector and a ...
CVE-2026-19206 MZ Automation libiec61850 ASDU Element sv_subscriber.c SVReceiver_stopThreadless heap-based overflow
A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiverstopThreadless of the file src/sampledvalues/svsubscriber.c of the component ASDU Element Handler. Performing a manipulation results in heap-based buffer overflow. The attack must be...
EUVD-2026-54486
A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiverstopThreadless of the file src/sampledvalues/svsubscriber.c of the component ASDU Element Handler. Performing a manipulation results in heap-based buffer overflow. The attack must be...
EulerOS 2.0 SP13 : rsync (EulerOS-SA-2026-2996)
According to the versions of the rsync packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement wh...
K000162732: Linux kernel vulnerability CVE-2026-52931
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: avoid use of uninit sender vars batadvtprecvack and batadvtpstop are only valid for tpvars in the BATADVTPSENDER role. When called with a BATADVTPRECEIVER role, it proceeds to re...