637949 matches found
Security Bulletin: This Power System update is being released to address CVE-2026-18871
Summary Power Systems Firmware is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boot stack to crash with possible memory...
Security Bulletin: This Power System update is being released to address CVE-2026-17100
Summary Power Systems Firmware is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the BMC/FSP can exploit this vulnerability, allowing arbitrary code to be executed in the host firmware runtime, giving full control ove...
Security Bulletin: This Power System update is being released to address CVE-2026-16707
Summary Power Systems Firmware is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to read or modify arbitrary regions of Hostboot memory, compromising the host...
Security Bulletin: This Power System update is being released to address CVE-2026-17028
Summary Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access to the same network as a partition undergoing iSCSI SAN network boot can prevent that partition from completing its boot sequence. Other partitions and...
Security Bulletin: This Power System update is being released to address CVE-2026-15961
Summary IBM PowerVM could allow a local attacker to obtain sensitive information or cause a denial of service due to improper control of format strings. Vulnerability Details CVEID:CVE-2026-15961 DESCRIPTION: IBM PowerVM could allow a local attacker to obtain sensitive information or cause a deni...
Security Bulletin: This Power System update is being released to address CVE-2026-4936
Summary PowerVM Platform KeyStore PKS and virtual TPM use persistent storage key seeds that result in an AES key with reduced strength. An attacker with access to the service processor or HMC could exploit this weakness to derive the encryption key and access the data. Vulnerability Details...
CVE-2026-19474
@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts. The iterator rejection that...
EUVD-2026-59761
@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts. The iterator rejection that...
CVE-2026-19474 @fastify/multipart vulnerable to Denial of Service via temporary file leak on aborted upload
@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts. The iterator rejection that...
CVE-2026-19474
@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts. The iterator rejection that...
CVE-2026-19474
The CVE-2026-19474 entry concerns @fastify/multipart, affecting versions 3.0.0 up to but not including 10.1.1. The root cause is that request.saveRequestFiles() can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts; the iterato...
CVE-2026-19474 @fastify/multipart vulnerable to Denial of Service via temporary file leak on aborted upload
@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts. The iterator rejection that...
MINI-49GX-65VV-M985
Bulletin has no description...
MINI-C289-GQ9G-J7PP
Bulletin has no description...
MINI-F2RH-RPHP-35JH
Bulletin has no description...
MINI-P7R2-5P42-MG69
Bulletin has no description...
MINI-Q72M-9XWQ-672F
Bulletin has no description...
MINI-GP88-WF7P-MMXC
Bulletin has no description...