16681 matches found
CVE-2026-109941
A flaw was found in FreeRDP. When processing Remote Desktop RD Gateway connections using HTTP chunked transfer encoding, a malicious or compromised server can send a partial chunk header or footer followed by a clean Transport Layer Security TLS shutdown. This condition causes the client to proce...
AZL-112415 CVE-2026-93006 affecting package dnsmasq 2.93-1
A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not invalidated when a transfer finishes. An attacker on the local network who can request a TFTP file may cause a later client to receive previously cached data instead of the...
DEBIAN-CVE-2026-93006
A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not invalidated when a transfer finishes. An attacker on the local network who can request a TFTP file may cause a later client to receive previously cached data instead of the...
CVE-2026-93006
A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not invalidated when a transfer finishes. An attacker on the local network who can request a TFTP file may cause a later client to receive previously cached data instead of the...
CVE-2026-91920
A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encoding in HTTP requests. The issue occurs because a security check for the chunk size is performed before the value is shifted, allowing a specifically crafted 15-digit chunk size ...
CVE-2026-93006
A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not invalidated when a transfer finishes. An attacker on the local network who can request a TFTP file may cause a later client to receive previously cached data instead of the...
EUVD-2026-112791
A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not invalidated when a transfer finishes. An attacker on the local network who can request a TFTP file may cause a later client to receive previously cached data instead of the...
CVE-2026-93006
A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not invalidated when a transfer finishes. An attacker on the local network who can request a TFTP file may cause a later client to receive previously cached data instead of the...
Security Bulletin: IBM MQ Managed File Transfer is affected by a denial of service vulnerability (CVE-2026-13271)
Summary IBM MQ Managed File Transfer has addressed a denial of service vulnerability due to improper restriction of XML external entity references in command queue processing. Vulnerability Details CVEID:CVE-2026-13271 DESCRIPTION: IBM MQ Managed File Transfer could allow an authenticated attacke...
Security Bulletin: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability (CVE-2026-12356)
Summary IBM MQ Managed File Transfer has addressed an arbitrary code execution vulnerability caused by injecting malicious arguments into Ant script commands. Vulnerability Details CVEID:CVE-2026-12356 DESCRIPTION: IBM MQ Managed File Transfer could allow an authenticated user with command queue...
Security Bulletin: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability (CVE-2026-13292)
Summary IBM MQ Managed File Transfer has addressed an arbitrary code execution vulnerability Vulnerability Details CVEID:CVE-2026-13292 DESCRIPTION: IBM MQ Managed File Transfer could allow an authenticated attacker to execute arbitrary code by injecting malicious environment variables through...
Security Bulletin: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability (CVE-2026-11724)
Summary IBM MQ Managed File Transfer has addressed an arbitrary code execution vulnerability Vulnerability Details CVEID:CVE-2026-11724 DESCRIPTION: IBM MQ could allow an authenticated attacker to execute arbitrary code on a Managed File Transfer agent host due to improper validation of metadata...
Security Bulletin: IBM MQ Managed File Transfer is vulnerable to XML external entity injection (CVE-2026-13284)
Summary IBM MQ Managed File Transfer has addressed an XML external entity injection vulnerability Vulnerability Details CVEID:CVE-2026-13284 DESCRIPTION: IBM MQ is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerabilit...
Security Bulletin: IBM MQ Managed File Transfer is vulnerable to XML external entity injection (CVE-2026-13289)
Summary IBM MQ Managed File Transfer has addressed an XML external entity XXE vulnerability Vulnerability Details CVEID:CVE-2026-13289 DESCRIPTION: IBM MQ is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to...
OESA-2026-4625 python-urllib3 security update
Sanity-friendly HTTP client for Python Security Fixes: urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxysslcontext, proxyasserthostname, proxyassertfingerprint, sslcontext, certreqs, verifymode, useforwardingforhttps=True, and CERTNONE configuration paths fail to...
OESA-2026-4583 squid security update
Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper...
OESA-2026-4582 squid security update
Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper...
OESA-2026-4581 squid security update
Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper...
OESA-2026-4580 squid security update
Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper...
Tornado: Event Loop Blocking And Excess Memory Use From Chunked Bodies With Many Small Chunks
Summary When Tornado reads an HTTP/1.1 body that uses chunked transfer encoding, it processes all chunks that have already arrived without yielding to the event loop. A client can send a body made of millions of 1-byte chunks, which blocks the event loop and therefore every other connection serve...