Lucene search
K

20 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:32 p.m.5 views

CVE-2026-6608

A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function addtext of the component Arena Side-by-Side View Handler. The manipulation results in incorrect control flow. The attack can be launched remotely. The exploit is now public and may be used. The root cause was...

6.9CVSS5.5AI score0.00308EPSS
Exploits0References1
Fedora
Fedora
added 2026/05/14 4:3 a.m.9 views

[SECURITY] Fedora 42 Update: nix-2.31.5-1.fc42

Nix is a purely functional package manager. It allows multiple versions of a package to be installed side-by-side, ensures that dependency specifications are complete, supports atomic upgrades and rollbacks, allows non-root users to install software, and has many other features. It is the basis o...

5.8AI score
Exploits0
Github Security Blog
Github Security Blog
added 2026/04/20 6:31 a.m.8 views

FastChat has a Content Moderation Bypass via Arena Side-by-Side Views

A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function addtext of the component Arena Side-by-Side View Handler. The manipulation results in incorrect control flow. The attack can be launched remotely. The exploit is now public and may be used. The root cause was...

6.9CVSS5.7AI score0.00308EPSS
Exploits0References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/20 5:15 a.m.0 views

CVE-2026-6608

A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function addtext of the component Arena Side-by-Side View Handler. The manipulation results in incorrect control flow. The attack can be launched remotely. The exploit is now public and may be used. The root cause was...

6.9CVSS5.5AI score0.00308EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2026/04/20 5:15 a.m.25 views

CVE-2026-6608 lm-sys fastchat Arena Side-by-Side View add_text control flow

A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function addtext of the component Arena Side-by-Side View Handler. The manipulation results in incorrect control flow. The attack can be launched remotely. The exploit is now public and may be used. The root cause was...

6.9CVSS0.00308EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/04/20 12:0 a.m.5 views

FastChat 安全漏洞

FastChat is an open-source platform developed by LMSYS for training, deploying, and evaluating chatbots based on large language models. Versions of FastChat prior to 0.2.36 contain security vulnerabilities. These vulnerabilities stem from incorrect operations on the addtext function in the Arena...

6.9CVSS6.1AI score0.00308EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/20 12:0 a.m.2 views

PT-2026-33714

A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function add text of the component Arena Side-by-Side View Handler. The manipulation results in incorrect control flow. The attack can be launched remotely. The exploit is now public and may be used. The root cause was...

6.9CVSS5.5AI score0.00308EPSS
Exploits0References9
Fedora
Fedora
added 2026/04/17 12:54 a.m.4 views

[SECURITY] Fedora 43 Update: nix-2.31.4-1.fc43

Nix is a purely functional package manager. It allows multiple versions of a package to be installed side-by-side, ensures that dependency specifications are complete, supports atomic upgrades and rollbacks, allows non-root users to install software, and has many other features. It is the basis o...

9CVSS5.8AI score0.00193EPSS
Exploits0
Spring Engineering
Spring Engineering
added 2025/10/07 12:0 a.m.3 views

Introducing Jackson 3 support in Spring

This is a new blog post in the Road to GA series, this time sharing more details on the new Jackson 3 support, just a few days after Jackson 3.0.0 GA release, about to be introduced in Spring Boot 4 and related Spring portfolio projects. Jackson is by far the most used JSON library on the JVM, an...

6.4AI score
Exploits0
SUSE CVE
SUSE CVE
added 2025/05/11 2:0 a.m.2 views

SUSE CVE-2025-46392

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuratio...

6.5CVSS9.4AI score0.01663EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2025/05/09 9:34 a.m.7 views

CVE-2025-46392

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuratio...

6.5CVSS6AI score0.01663EPSS
Exploits0
Microsoft Secure
Microsoft Secure
added 2021/08/03 4:0 p.m.54 views

How to manage a side-by-side transition from your traditional SIEM to Azure Sentinel

With every week bringing new headlines about crippling cyberattacks, and with organizations growing increasingly distributed, security teams are constantly asked to do more with less. Moving to cloud-native security information and event management SIEM can help security teams analyze data with t...

7AI score
Exploits0
Microsoft Malware Protection
Microsoft Malware Protection
added 2021/08/03 4:0 p.m.43 views

How to manage a side-by-side transition from your traditional SIEM to Azure Sentinel

With every week bringing new headlines about crippling cyberattacks, and with organizations growing increasingly distributed, security teams are constantly asked to do more with less. Moving to cloud-native security information and event management SIEM can help security teams analyze data with t...

7AI score
Exploits0
Schneier on Security
Schneier on Security
added 2021/05/21 1:50 p.m.10 views

Double-Encrypting Ransomware

This seems to be a new tactic: Emsisoft has identified two distinct tactics. In the first, hackers encrypt data with ransomware A and then re-encrypt that data with ransomware B. The other path involves what Emsisoft calls a "side-by-side encryption" attack, in which attacks encrypt some of an...

2.5AI score
Exploits0
Microsoft KB
Microsoft KB
added 2020/04/21 12:0 a.m.3 views

Description of the SharePoint Workspace 2010 update: November 13, 2012

Description of the SharePoint Workspace 2010 update: November 13, 2012 INTRODUCTION Microsoft has released an update for Microsoft SharePoint Workspace 2010. This update provides the latest fixes for the 32-bit and 64-bit editions of SharePoint Workspace 2010. Issue that this update fixes When yo...

6.4AI score
Exploits0
The Hacker News
The Hacker News
added 2016/06/30 11:41 p.m.11 views

Google finally announces Android N's name and It's not Nutella

No, it's not Nutella. Google has finally announced the official name of the latest version of its Android mobile software, codenamed Android N: "Nougat." Yes, the next version of sugary snack-themed Android and the successor to Android Marshmallow will now be known as Android Nougat, the company...

6.7AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2011/03/16 12:0 a.m.19 views

Fedora 14 : cgit-0.9-1.fc14 (2011-2803)

In addition to closing a DOS vulnerability thanks to Jim Meyering, this upstream feature release adds the following enhancements : - Support for side-by-side diffs - Support for repo content in 'about' view - Improved integration with gitolite/gitweb - Support for git notes in commit/log view -...

5CVSS5.5AI score0.03746EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2011/03/16 12:0 a.m.27 views

Fedora 13 : cgit-0.9-1.fc13 (2011-2815)

In addition to closing a DOS vulnerability thanks to Jim Meyering, this upstream feature release adds the following enhancements : - Support for side-by-side diffs - Support for repo content in 'about' view - Improved integration with gitolite/gitweb - Support for git notes in commit/log view -...

5CVSS5.5AI score0.03746EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2011/03/16 12:0 a.m.21 views

Fedora 15 : cgit-0.9-1.fc15 (2011-2790)

In addition to closing a DOS vulnerability thanks to Jim Meyering, this upstream feature release adds the following enhancements : - Support for side-by-side diffs - Support for repo content in 'about' view - Improved integration with gitolite/gitweb - Support for git notes in commit/log view -...

5CVSS5.5AI score0.03746EPSS
Exploits1References4
Microsoft KB
Microsoft KB
added 1970/01/01 12:0 a.m.5 views

End of support for Office 2016 and Office 2019

None None...

5.3AI score
Exploits0
Rows per page
Query Builder