2026

rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is use

rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the read_args() function that allows a malicio

rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system resour

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation

rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hash_search() function that allows a remote a

rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent host

A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authentica

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in cca_cipher2pro

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private ke

** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Shindig. This issue affects A

A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information

Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key v

An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module.  See vulnerability B-E

A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vuln

The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denia

During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow

During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Man

During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could all

During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manag

rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files b

rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the r

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows

rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows atta

rsync before 3.5.0 contains a symlink race condition vulnerability that allows local attackers to cause rsync to apply a

rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that al

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an

rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the non-daemon recei

rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the inten

rsync before 3.5.0 contains a logic error in --max-alloc handling that allows a sender or configuration setting --max-al

rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended in

rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a ma

rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to

rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbi

rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope o

rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allow

rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override module-leve

rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the int

rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intend

rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the rrsync restricte

auth-fetch-mcp is an MCP server that lets AI assistants fetch content from authenticated web pages. Version 3.0.1 implem

@jshookmcp/jshook is an MCP server that gives AI agents tools for JavaScript analysis and security research. In version

Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams. Probo

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in snstheme Samex - C

Missing Authorization and Authorization Bypass Through User-Controlled Key in the product management component in Roskus

SMP security request (from peripheral) does not include the maximum encryption key size supported. Using a key with less

Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier. Se

Bluetooth re-pairing with an existing device can use a lower security level. RS9116W and SiWx91x impacted. See V3 in the

Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLE