9308 matches found
Oracle Linux 8 : freerdp (ELSA-2026-69387)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69387 advisory. 2:2.11.7-13 - Fix RPC gateway fragment size and capacity checks CVE-2026-55193 Resolves: RHEL-247353 Tenable has extracted the preceding description block...
Hatchet DurableTask WorkerStatus gRPC resolves caller-supplied durable-task UUIDs via ListSatisfiedEntries with no tenant_id filter
Cross-tenant disclosure risk on DurableTask bidi RPC This is a low-severity, low-risk cross-tenant data exposure vuln caused by blindly accepting a durable task id, in addition to a list of node and branch ids that identify records in that task's event log, and returning them to the caller via th...
MCP Atlassian: ENABLED_TOOLS / Toolset authorization bypass
Summary ENABLEDTOOLS and TOOLSETS filters are enforced at tools/list time only. tools/call dispatches from the full unfiltered tool registry 73 tools. Any user with access to the server endpoint that knows a tool name can invoke it directly. Tool names are not secret since mcp-atlassian is open...
MAL-2026-16538 Malicious code in spark-rpc (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in spark-rpc (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2026-13087
Rejected reason: This CVE was reserved in error and duplicates CVE-2026-89530...
UBUNTU-CVE-2026-13087
Rejected reason: This CVE was reserved in error and duplicates CVE-2026-89530...
CVE-2026-13087
Rejected reason: This CVE was reserved in error and duplicates CVE-2026-89530...
CVE-2026-13087
A heap out-of-bounds write vulnerability was found in the Linux kernel's RPC-over-RDMA server reply path in net/sunrpc/xprtrdma/svcrdmasendto.c. When a crafted RPC-over-RDMA client sends a large NFS READ request with an empty Write list and no Reply chunk, the server linearizes the entire...
CVE-2026-13087
A heap out-of-bounds write vulnerability exists in the Linux kernel 's RPC-over-RDMA server reply path specifically in net/sunrpc/xprtrdma/svc_rdma_sendto.c. The flaw occurs when a crafted RPC-over-RDMA client sends a large NFS READ request with an empty Write list and no Reply chunk; the server ...
EUVD-2026-84560
A heap out-of-bounds write vulnerability was found in the Linux kernel's RPC-over-RDMA server reply path in net/sunrpc/xprtrdma/svcrdmasendto.c. When a crafted RPC-over-RDMA client sends a large NFS READ request with an empty Write list and no Reply chunk, the server linearizes the entire...
CVE-2026-13087 Kernel: heap out-of-bounds write in the linux kernel rpc-over-rdma server reply path...
A heap out-of-bounds write vulnerability was found in the Linux kernel's RPC-over-RDMA server reply path in net/sunrpc/xprtrdma/svcrdmasendto.c. When a crafted RPC-over-RDMA client sends a large NFS READ request with an empty Write list and no Reply chunk, the server linearizes the entire...
CVE-2026-94640 Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service
A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a large number of unique requests. The rpcbind service records previously unseen RPC Remote Procedure Call statistics in unbounded in-memory lists, leading to...
Apache OFBiz 17.12.03 - Cross-Site Scripting
Apache OFBiz 17.12.03 contains cross-site scripting and unsafe deserialization vulnerabilities via an XML-RPC request. id: CVE-2020-9496 info: name: Apache OFBiz 17.12.03 - Cross-Site Scripting author: dwisiswant0 severity: medium description: Apache OFBiz 17.12.03 contains cross-site scripting a...
CVE-2026-13087: Undefined Security Weakness
Rejected reason: This CVE was reserved in error and duplicates CVE-2026-89530...
CVE-2026-94640: Uncontrolled Resource Consumption
A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a large number of unique requests. The rpcbind service records previously unseen RPC Remote Procedure Call statistics in unbounded in-memory lists, leading to...
Linux Distros Unpatched Vulnerability : CVE-2026-13087
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap out-of-bounds write vulnerability was found in the Linux kernel's RPC-over-RDMA server reply path in net/sunrpc/xprtrdma/svcrdmasendto.c. When a crafted...
PT-2026-96841
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap out-of-bounds write exists in the RPC-over-RDMA server reply path within net/sunrpc/xprtrdma/svc rdma sendto.c. The issue occurs when a crafted RPC-over-RDMA client sends a large...
PT-2026-96709
Name of the Vulnerable Software and Affected Versions ZenHive mpp versions 0.14.0 through 0.16.1 Description Improper validation of the specified quantity in the input allows a client with an open payment channel to obtain paid resources without being charged. The function accept voucher/3 in...