5343 matches found
EUVD-2026-104307
SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort other users' in-flight generation requests by supplying a short client-controlled rid. Attackers can submit streaming /generate requests with single hex character rids and disconnect, triggering...
CVE-2026-112266 SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching
SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort other users' in-flight generation requests by supplying a short client-controlled rid. Attackers can submit streaming /generate requests with single hex character rids and disconnect, triggering...
CVE-2026-112266 SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching
SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort other users' in-flight generation requests by supplying a short client-controlled rid. Attackers can submit streaming /generate requests with single hex character rids and disconnect, triggering...
CVE-2026-112266
SGLang versions through 0.5.22 are vulnerable to a denial of service flaw caused by incorrect rid prefix matching logic. An API client can trigger a cross-request abort by submitting a streaming /generate request with a short, client-controlled rid (e.g., a single hex character) and then disconne...
CVE-2026-111839
Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.7...
CVE-2026-111839
The WordPress Broadcast Live Video plugin (videowhisper-live-streaming-integration) versions 7.3.7 and below is vulnerable to a Missing Authorization issue. This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels . The vulnerability results in Broken Access Control ,...
CVE-2026-111839 WordPress Broadcast Live Video plugin <= 7.3.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.7...
CVE-2026-112266: Partial String Comparison
SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort other users' in-flight generation requests by supplying a short client-controlled rid. Attackers can submit streaming /generate requests with single hex character rids and disconnect, triggering...
CVE-2026-111839: Missing Authorization
Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.7...
CVE-2024-50395
CVE-2024-50395 CVE Info An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network attackers to gain privilege. We have already fixed the vulnerability in the following version:...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.12 contains security vulnerabilities. These vulnerabilities stem from the netfsreadgaps function, which does not clear the read gaps surrounding the streaming write to the dirty area. As a result, short reads on the server side or EOF responses may retain outdatedfolio...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: media: vidtv: Fixed a null pointer dereference in vidtvmuxstopthread. A report from syzbot indicated a null pointer dereference in vidtvmuxstopthread. 1 If dvb-mux is not initialized successfully by vidtvmuxinit in...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Removed unnecessary locks from usbtvvideofree. The lock-related code in usbtvvideofree is now removed because it is unnecessary and may lead to a deadlock, as reported here:...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...
CVE-2026-103930
A flaw was found in cpp-httplib. The library is vulnerable to HTTP request splitting due to improper encoding of carriage-return and line-feed characters within streaming request paths. If an application forwards untrusted user input to the streaming client interface, a remote attacker can supply...
CLEANSTART-2026-AW40978 frontend gRPC server's streaming interceptor chain did not include the authorization interceptor
Security vulnerability affects the temporal-server-fips package. The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor...
CVE-2026-102180
A Stack-based Buffer Overflow vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . An attacker with access to a configured BGP peering session can trigger a denial of service by sending a crafted BGP route attribute. This occurs specificall...
CVE-2026-102180 Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP peering session to cause a denial of service by sending a crafted BGP route attribute, which is processed while a BGP...
EUVD-2026-101396
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP peering session to cause a denial of service by sending a crafted BGP route attribute, which is processed while a BGP...