23733 matches found
CVE-2026-116844
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the...
CVE-2026-116844
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the...
EUVD-2026-110575
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the...
CVE-2026-116844
The fclairamb ftpserverlib (versions through 0.32.4 ) is vulnerable to a cleartext transmission flaw. The root cause lies in the TransferOpen function, which verifies only the transferTLS flag set by the PROT command but fails to confirm if the actual data connection utilizes TLS. Consequently, w...
CVE-2026-116844 Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES Data Transfer via PROT P
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the...
CVE-2026-116844 Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES Data Transfer via PROT P
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the...
CVE-2026-116844 Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES Data Transfer via PROT P
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the...
PT-2026-125555
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the...
PT-2026-125885
An improper certificate validation vulnerability exists in Moxa Remote Connect Suite MRC Client. Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle...
CVE-2026-112576
A memory integrity issue was addressed with improved handling of copy-on-write pages. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to caus...
CVE-2026-112576
A memory integrity issue exists in various Apple operating systems due to improper handling of copy-on-write pages . This flaw could allow an application to trigger unexpected changes to copy-on-write memory. The issue is addressed in iOS 26.7.2 , iPadOS 26.7.2 , iOS 27.2 , iPadOS 27.2 , macOS Go...
EUVD-2026-110102
A memory integrity issue was addressed with improved handling of copy-on-write pages. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to caus...
CVE-2026-112576
A memory integrity issue was addressed with improved handling of copy-on-write pages. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to caus...
Security Bulletin: IBM Engineering Lifecycle Management on Hybrid Cloud is affected by multiple security vulnerabilities.
Summary This release addresses security vulnerabilities in application and operator images of ELM on Hybrid Cloud. The identified vulnerabilities affect OS packages and Go standard library packages and impact the product in the deployed environment. Two of the vulnerabilities are rated high, with...
CVE-2026-115693
Improper Certificate Validation vulnerability in hackneyssl in benoitc hackney allows an on-path attacker to impersonate a server pinned to a private certificate authority via a certificate chain that ends in a publicly trusted root. hackney adds partialchain, fun hackneyssl:partialchain/1 to eve...
CVE-2026-115693 Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney
Improper Certificate Validation vulnerability in hackneyssl in benoitc hackney allows an on-path attacker to impersonate a server pinned to a private certificate authority via a certificate chain that ends in a publicly trusted root. hackney adds partialchain, fun hackneyssl:partialchain/1 to eve...
EUVD-2026-109836
Improper Certificate Validation vulnerability in hackneyssl in benoitc hackney allows an on-path attacker to impersonate a server pinned to a private certificate authority via a certificate chain that ends in a publicly trusted root. hackney adds partialchain, fun hackneyssl:partialchain/1 to eve...
CVE-2026-115693 Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney
Improper Certificate Validation vulnerability in hackneyssl in benoitc hackney allows an on-path attacker to impersonate a server pinned to a private certificate authority via a certificate chain that ends in a publicly trusted root. hackney adds partialchain, fun hackneyssl:partialchain/1 to eve...
EEF-CVE-2026-115693 Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney
Summary Improper Certificate Validation vulnerability in hackneyssl in benoitc hackney allows an on-path attacker to impersonate a server pinned to a private certificate authority via a certificate chain that ends in a publicly trusted root. hackney adds partialchain, fun hackneyssl:partialchain/...
CVE-2026-115693
The hackney_ssl component in benoitc hackney (versions 1.24.0 before 4.9.0 ) contains an Improper Certificate Validation vulnerability. The root cause is that hackney_ssl:merge_ssl_opts/3 retains a default partial_chain callback even when a user provides a custom cacerts or cacertfile to pin a pr...