2026

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.

Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, write(s rune

Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, the setStyle

rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers

rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses co

rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows

rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated attackers

rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to escape the module roo

rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows remot

rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by trigge

rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is use

rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the read_args() function that allows a malicio

rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system resour

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation

rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hash_search() function that allows a remote a

rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent host

A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authentica

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in cca_cipher2pro

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private ke

** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Shindig. This issue affects A

A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information

Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key v

An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module.  See vulnerability B-E

A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vuln

The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denia

During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow

During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Man

During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could all

During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manag

rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files b

rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the r

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows

rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows atta

rsync before 3.5.0 contains a symlink race condition vulnerability that allows local attackers to cause rsync to apply a

rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that al

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an

rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the non-daemon recei

rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the inten

rsync before 3.5.0 contains a logic error in --max-alloc handling that allows a sender or configuration setting --max-al

rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended in

rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a ma

rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to

rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbi

rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope o

rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allow

rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override module-leve

rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the int

rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intend