Apache Camel configuration error vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a configuration error vulnerability. This vulnerability stems from the enableCORS function of the Jetty component using the default CrossOriginFilter configuration, which accepts requests from any origin and allows...

IBM Storage TS4500 Library Resource Management Vulnerability

The IBM Storage TS4500 Library versions 1.1.1.6 to 1.12.0.3 have a resource management vulnerability. This vulnerability arises from specially crafted SMTP requests, which consume excessive system resources and may cause denial of service for authenticated users...

aio-libs Async HTTP client/server framework Resource management error vulnerability

The aio-libs Async HTTP client/server framework, versions 2.0.0 to 3.14.4, has a resource management vulnerability. This vulnerability stems from the handling of multipart requests, which retains an unlimited number of open file descriptors. When the processing program uses Request.post,...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation. This vulnerability arises when the FopProducer creates a TransformerFactory by enabling only FEATURESECUREPROCESSING, without restricting access to external resources...

CVE-2026-98615 eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Set AWFLUSHMODE alongside AWFLUSH when flushing the mailbox When tearing down the FW mailbox Rx ring, fbnicmbxresetdescring writes AWCFG with FLUSH set and everything else, BME included, cleared. Clearing BME halts th...

AZL-109275 CVE-2026-98439 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may still be waiting when a connection is closed. This can stop the connection from closing. Cancel active async requests before waiting for them to finis...

CVE-2026-98439

In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may still be waiting when a connection is closed. This can stop the connection from closing. Cancel active async requests before waiting for them to finis...

UBUNTU-CVE-2026-98439

In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may still be waiting when a connection is closed. This can stop the connection from closing. Cancel active async requests before waiting for them to finis...

CVE-2026-98439

In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may still be waiting when a connection is closed. This can stop the connection from closing. Cancel active async requests before waiting for them to finis...

EUVD-2026-103386

A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerability is an unknown functionality of the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php of the component Scheduled Restore. Such manipulation of the argument schemaname leads to missing...

PT-2026-116658

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB server where asynchronous requests may remain pending when a connection is closed. This behavior can prevent the connection from closing properly. The problem...

CVE-2026-98439: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may still be waiting when a connection is closed. This can stop the connection from closing. Cancel active async requests before waiting for them to finis...

CVE-2026-111904 phpMyFAQ 4.2.0-alpha before 4.2.0-beta Information Disclosure via open-questions API

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclosure vulnerability that allows unauthenticated attackers to read hidden open questions due to an inverted api.onlyPublicQuestions check in OpenQuestionController. Attackers can send GET requests to the /api/v4.0/open-questions...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.19 contains a security vulnerability. This vulnerability arises from SMB clients failing to close completed CREATE requests when there is a composite wait or MID synchronization interruption, resulting in remote handles remaining open...

David Courtey: Database Authorization Vulnerability

David Courtey: Versions of the DatabaseEngine 1.8.1 and earlier have an authorization issue. This vulnerability stems from the improper handling of the parameter schemaname by the Scheduled Restore component in the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php. As a result,...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the failure to delete the mid in the pendingmidq before unlocking when sending compound requests. As a result, during reconnection, the callback function returns credits from the wrong path, causing the inflight counter...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.9 contains a security vulnerability. This vulnerability arises from binding the IRQ requests managed by the devres group and devm to the embedded struct device within each copied port altredacdevicedev, rather than to the actual parent device device-edac-dev. As a resul...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from improper lifecycle management of TE GPIO in the samsung-dsim driver. When the DSI host is detached or reattached, the GPIO is not released, potentially leading to repeated requests for the GPIO...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 7.2.7 contain security vulnerabilities. These vulnerabilities arise from SMB servers failing to cancel asynchronous requests that are still pending when closing connections, resulting in connections not being able to be closed properly...

CVE-2026-89096

A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service DoS by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory...