Grafana Unauthenticated Snapshot Creation

Grafana 6.7.3 through 7.4.1 snapshot functionality can allow an unauthenticated remote attacker to trigger a Denial of Service via a remote API call if a commonly used configuration is set. id: CVE-2021-27358 info: name: Grafana Unauthenticated Snapshot Creation author: pdteam,bing0o severity: hi...

Nagios XI 5.5.6-5.7.5 - Authenticated Remote Command Injection

Nagios XI 5.5.6 through 5.7.5 is susceptible to authenticated remote command injection. There is improper sanitization of authenticated user-controlled input by a single HTTP request via the file /usr/local/nagiosxi/html/includes/configwizards/cloud-vm/cloud-vm.inc.php. This in turn can lead to...

React Server Components - Denial of Service

React Server Components 19.0.0 to 19.2.1 including react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack contain an insecure deserialization vulnerability caused by unsafe payload deserialization in Server Function endpoints, letting unauthenticated attackers cause...

cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption

A flaw was found in cjose. When encrypting a JSON Web Encryption JWE object using AES-CBC-HMAC algorithms, the library initializes the encryption key with all-zero bytes instead of generating a secure random key. As a result, an attacker who intercepts the encrypted message can decrypt sensitive...

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

A flaw was found in the HTTP/2 protocol implementation within the Go standard library golang.org/x/net and net/http/internal/http2. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGSMAXFRAMESIZE parameter set to zero. This...

Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.18.57 security update

Red Hat build of MicroShift release 4.18.57 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

A flaw was found in the HTTP/2 protocol implementation within the Go standard library golang.org/x/net and net/http/internal/http2. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGSMAXFRAMESIZE parameter set to zero. This...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

CVE-2026-76661

A vulnerability exists in HPE NonStop QIOMON (T8671) where an out-of-bounds write can occur, leading to the corruption of buffer data. This memory corruption flaw could potentially result in a Denial of Service (DoS) , buffer overflow, or stack overflow. HPE has released security fixes; specifica...

CVE-2026-76661 HPE NonStop QIOMON - Memory corruption vulnerability

A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data...

EUVD-2026-101812

A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data...

Kerberos-CVE-2026-27912

Kerberos-CVE-2026-27912 CVE-2026-27912 - Windows Kerberos Elevation of Privilege Vulnerability ResetNightmare - Unauthorized password reset via Kerberos Change Password protocol flaw. 📋 Details Field| Value ---|--- CVE| CVE-2026-27912 Title| Windows Kerberos Elevation of Privilege Vulnerability...

EUVD-2026-101811

A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data...

CVE-2026-76660

A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data. This flaw could lead to denial of service (DoS) , memory corruption, buffer overflows, or stack overflows. The affected component is CIPSAM T0693 (versions T0693L02^BAU and earlier). HPE has released...

CVE-2026-76660 HPE NonStop CIPSAM - Memory corruption vulnerability

A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data...

CVE-2026-76659 HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability

A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service...

EUVD-2026-101809

A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service...

CVE-2026-76659

A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES (T8602) allows an unauthenticated remote attacker to cause a Denial of Service (DoS) . The affected version is T8602L01^BAA and earlier . HPE has released a fix for this vulnerability in version T8602L01^BAD L24.08 onwards . Exp...