13004 matches found
CVE-2026-103413: Improper Input Validation
Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...
CVE-2026-78399 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources...
EUVD-2026-95272
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources...
CVE-2026-78399
IBM Security Verify Access (versions 10.0 through 10.0.9.2) and IBM Verify Identity Access (versions 11.0 through 11.0.3) are vulnerable to a Denial of Service (DoS) attack. An authenticated user can trigger the DoS by sending a specially crafted HTTP query , which leads to an improper allocation...
CVE-2026-105826
Rejected reason: This CVE ID has been rejected as a duplicate...
DEBIAN-CVE-2026-105399
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a denial of service vulnerability in the MVG decoder caused by a missing limit check. Attackers can supply a crafted MVG image that triggers a long-running decoding operation, consuming excessive CPU resources and stalling image...
CVE-2026-105826
A security policy bypass exists in the ImageMagick MAT decoder in versions before 6.9.13-55 and 7.x before 7.1.2-30 . A remote attacker can submit a specially crafted MAT image containing highly compressed data that causes the decoder to fail to enforce configured temporary file size limits. This...
EUVD-2026-95003
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a denial of service vulnerability in the MVG decoder caused by a missing limit check. Attackers can supply a crafted MVG image that triggers a long-running decoding operation, consuming excessive CPU resources and stalling image...
CVE-2026-92555
Insertion of sensitive information into sent data vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. AKINSOFT WOLVOX Control Panel allows Pull Data from System Resources. This issue affects AKINSOFT WOLVOX Control Panel: from 26.02.25 before 26.02.26...
CVE-2026-92555
The AKINSOFT WOLVOX Control Panel by AKIN Software Computer Import-Export Industry and Trade Co. Ltd. is vulnerable to an insertion of sensitive information into sent data (CWE-201). This flaw allows an attacker to pull data from system resources , potentially including database credentials . The...
EUVD-2026-94868
Insertion of sensitive information into sent data vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. AKINSOFT WOLVOX Control Panel allows Pull Data from System Resources. This issue affects AKINSOFT WOLVOX Control Panel: from 26.02.25 before 26.02.26...
CLEANSTART-2026-DN30065 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings
Security vulnerability affects the apache-hive package. Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings...
ROS-20261008-73-0182
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261008-73-0205
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261008-73-0268
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261008-73-0316
The vulnerability in the kernel-lt is related to incorrect blocking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261008-73-0160
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-94440: Allocation of Resources Without Limits or Throttling
Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes...
CVE-2026-106565
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-...