CVE-2021-43129

CVE-2021-43129 D2L Brightspace 학습 관리 시스템LMS의 취약점 취약점 유형: CWE-668: 잘못된 영역에 리소스 노출Exposure of Resource to Wrong Sphere 제품 공급업체: Desire2Learn/D2L 영향을 받는 제품 코드 베이스: D2L Brightspace 학습 관리 시스템LMS 테스트된 버전: 20.21.7 D2L은 2022년 8월에 "오른쪽 클릭 비활성화Disable Right Click" 설정이 폐지될 것이라고 발표했습니다...

CVE-2023-41474

IVANTI AVALANCHE - 경로 탐색 PATH TRAVERSAL Ivanti Avalanche에서 새로운 취약점이 발견되었습니다. Avalanche Server v6.3.4.153에서 테스트되었으며 CVE-2023-41474로 식별되었습니다. 이는 제한된 인증 없는 경로 탐색 취약점으로, 인증되지 않은 공격자가 기본 구성에서 C:\PROGRAM DATA\Wavelink\AVALANCHE\Web\ webapps\AvalancheWeb 아래의 모든 파일에 접근할 수 있음을 의미합니다. 그러나 .xml 또는 .html과...

POC_CVE-2024-12537

CVE-2024-12537 Open WebUI 코드 포맷 DoS 실습 환경 이 저장소는 CVE-2024-12537에 대한 로컬 격리 재현 실습 환경과 nuclei 템플릿 후보를 포함합니다. 이는 Open WebUI의 코드 포맷팅 엔드포인트에서의 인증되지 않은 서비스 거부 취약점입니다. 이 실습 환경은 대규모 서비스 거부 페이로드를 보내지 않습니다. Open WebUI의 인증되지 않은 /api/version 핑거프린트 엔드포인트와 /api/v1/utils/code/format에 대한 최소 "code":"x" 요청을 통해 nucl...

CVE-2026-19668

A BIND recursive resolver may experience excessive resource consumptio...

UBUNTU-CVE-2026-19668

A BIND recursive resolver may experience excessive resource consumptio...

RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery

Summary The rmcp library does not validate the resource parameter in OAuth Protected Resource metadata RFC 9728, allowing a malicious MCP server to redirect OAuth flows to a legitimate authorization server and steal the resulting access tokens. Details RFC 9728 specifies two MUST requirements for...

CVE-2026-20336

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

CVE-2026-20250

A vulnerability in Datagram TLS DTLS message handling of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software for Cisco Secure Firewall 3100 Series and 4200 Series devices could allow an unauthenticated, remote attacker to cause a...

CVE-2026-76646

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, ...

CVE-2026-20194

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC, engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

CVE-2026-20336

Cisco Secure ASA, Secure Firewall Threat Defense (FTD), and Secure Firewall Management Center (FMC) Software are affected by resource lifetime management vulnerabilities (CWE-664), identified through Cisco's internal security review as part of a proactive hardening release. The CVSS 3.1 score is ...

CVE-2026-20336 Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Resource Lifetime Management Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

EUVD-2026-81112

A vulnerability in Datagram TLS DTLS message handling of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software for Cisco Secure Firewall 3100 Series and 4200 Series devices could allow an unauthenticated, remote attacker to cause a...

CVE-2026-20250

Cisco Secure Firewall ASA and FTD Software for 3100 Series and 4200 Series devices are affected by a Denial of Service vulnerability in Datagram TLS (DTLS) message handling . The root cause is improper resource management when processing certain DTLS messages. An unauthenticated, remote attacker ...

CVE-2026-20194

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) are affected by a vulnerability classified as CWE-669 (Incorrect Resource Transfer Between Spheres) , discovered during an internal security review. The flaw permits high-privilege network attackers to achieve...

EUVD-2026-81100

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC, engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

CVE-2026-20194 Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC, engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

CVE-2026-76646 Apache MyFaces: Denial of Service via Unbounded Request Parsing

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, ...

EUVD-2026-80956

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, ...

CVE-2026-76646

Apache MyFaces is vulnerable to a denial of service via unbounded request parsing . A remote, unauthenticated attacker can supply specially crafted request parameters to cause excessive resource consumption, leading to a DoS condition. The CVSS 3.1 score is 7.5 (HIGH) , with high availability imp...