308174 matches found
CVE-2026-72222 sunrpc: pin svc_xprt across the asynchronous TLS handshake callback
In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svcxprt across the asynchronous TLS handshake callback svctcphandshake stores the raw svcxprt pointer in tlshandshakeargs.tadata and submits the request through tlsserverhellox509. The handshake core takes only...
EUVD-2026-59121
In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svcxprt across the asynchronous TLS handshake callback svctcphandshake stores the raw svcxprt pointer in tlshandshakeargs.tadata and submits the request through tlsserverhellox509. The handshake core takes only...
CVE-2026-72222
The CVE-2026-72222 entry corresponds to a Linux kernel vulnerability in the sunrpc TLS handshake path. The issue arises from races where an in-flight async TLS handshake callback can write through a freed svc_sock, due to the embedding svc_sock being container_of() referenced after tls_handshake_...
CVE-2026-72222 sunrpc: pin svc_xprt across the asynchronous TLS handshake callback
In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svcxprt across the asynchronous TLS handshake callback svctcphandshake stores the raw svcxprt pointer in tlshandshakeargs.tadata and submits the request through tlsserverhellox509. The handshake core takes only...
CVE-2026-72217 SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Bound-check xdrbuftobvec stores before writing xdrbuftobvec writes a biovec into the caller's array before testing whether that slot is in range, and the head branch performs the store with no check at all. When the...
CVE-2026-72217
The CVE-2026-72217 issue concerns SUNRPC in the Linux kernel where xdr_buf_to_bvec() writes a bio_vec before validating the destination slot, allowing an out-of-bounds write when budget is exhausted. The rq_bvec array used by nfsd_vfs_write() is allocated to rq_maxpages with no slack, so an overf...
Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion
...
Vim: Stack Buffer Overflow in the Vim Socket Server
...
PT-2026-72562
In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses an rxrpc server to listen for callback notifications. Each callback call type handler has a delivery function that parses the incomi...
VulnCheck KEV: CVE-2021-2109
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP...
PT-2026-73054
siyuan versions = 3.7.3 fixed in v3.7.4 contain a server-side template injection vulnerability in the attribute-view Template calculation feature introduced in v3.7.0-beta.1. The feature's template engine uses Sprig's unmodified function map, which still exposes the env, expandenv, and...
PT-2026-72410
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sunrpc component of the Linux kernel affecting TLS-enabled NFS servers. A race condition occurs during the asynchronous TLS handshake when a connection is closed,...
SUSE CVE-2026-16241
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...
CVE-2026-55157
creationtimestamp| type| source ---|---|--- 2026-08-14 22:35:05+00:00| published-proof-of-concept| https://github.com/ooples/token-optimizer-mcp/security/advisories/GHSA-49mq-fc6q-3h46...
CVE-2026-48804
A flaw was found in python-socketio, a Python implementation of the Socket.IO realtime client and server. The server stores binary messages in memory while awaiting their attachments. A remote attacker can exploit this by sending a binary message and deliberately withholding some attachments. Thi...
CVE-2026-53708
creationtimestamp| type| source ---|---|--- 2026-08-14 20:35:03+00:00| published-proof-of-concept| https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-9hgc-g3w5-67cm...
CVE-2026-73653 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse...
GO-2026-6179 vulnerabilities
Vulnerabilities for packages: spire-server, helm, trino, cert-manager, k8s-device-plugin, zot, terraform, langfuse, snyk-cli, k3s, cilium, reports-server, containerd, langfuse-fips, commercial-grafana, k3d, nerdctl, prometheus-mongodb-exporter, kyverno, upwind-agent, aactl, kube-conformance, kots...
GO-2026-6180 vulnerabilities
Vulnerabilities for packages: spire-server, helm, trino, cert-manager, k8s-device-plugin, zot, terraform, langfuse, snyk-cli, k3s, cilium, reports-server, containerd, langfuse-fips, commercial-grafana, k3d, nerdctl, prometheus-mongodb-exporter, kyverno, upwind-agent, aactl, kube-conformance, kots...
CVE-2026-56864 vulnerabilities
Vulnerabilities for packages: spire-server, helm, trino, cert-manager, k8s-device-plugin, zot, terraform, langfuse, snyk-cli, k3s, cilium, reports-server, containerd, langfuse-fips, commercial-grafana, k3d, nerdctl, prometheus-mongodb-exporter, kyverno, upwind-agent, aactl, kube-conformance, kots...