aiohttp HTTP Client Resource Exhaustion

The vulnerability of the aiohttp HTTP client is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

aiohttp HTTP Client Request Manipulation

The vulnerability of the aiohttp HTTP client is related to deficiencies in request processing. Exploiting this vulnerability allows an attacker who operates remotely to carry out attacks by replacing HTTP requests with malicious content...

CairoSVG Uncontrolled Recursion DoS

The vulnerability of the SVG converter CairoSVG is related to uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Google Chrome on Android 资源管理错误漏洞

Google Chrome on Android is a web browser in the Android operating system developed by Google Inc. Versions of Google Chrome on Android prior to 148.0.7778.216 contained a resource management vulnerability. This vulnerability stemmed from the WebView component’s ability to reuse resources after...

CVE-2026-3660

IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update server property files that would allow them to gain unauthorized access to the application...

CVE-2026-7251

Eppendorf BioFlo 320 is vulnerable due to VNC server using a hard-coded password. If a remote attacker knows the network address of any BioFlo 320 model with remote access enabled, they can gain full control of the user interface by using this password. Once connected, the attacker would have ful...

CVE-2026-47202 Kavita: Pre-Auth Account Takeover

Kavita is a cross platform reading server. Prior to 0.9.0.2, an Improper Token validation flaw permits a remote and unauthenticated threat actor to request a JWT for any user including admins given knowledge of their username. This vulnerability is fixed in 0.9.0.2...

CVE-2026-8047

The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device...

IBM Cloud Pak for Data System SQL注入漏洞

IBM Cloud Pak for Data System is an enterprise data and AI integration platform provided by IBM. Version 11.3.0.2 of IBM Cloud Pak for Data System, as well as the Interim Fix 002, contain a SQL injection vulnerability. This vulnerability allows for SQL injection attacks, potentially enabling remo...

Delta Electronics DIAView 安全漏洞

Delta Electronics DIAView is an industrial configuration software developed by Delta Electronics in China. Delta Electronics DIAView has a security vulnerability, which stems from the possibility for unverified remote attackers to access the configured database...

GnuTLS 安全漏洞

GnuTLS is an open-source, free security communication library developed by GnuTLS that enables the implementation of SSL, TLS, and DTLS protocols. There is a security vulnerability in gnutls. This vulnerability arises from the fact that using an excessively long subject alternative name during...

SourceCodester Student Grades Management System 授权问题漏洞

SourceCodester Student Grades Management System is SourceCodester open source a student grades management system . SourceCodester Student Grades Management System 1.0 version of the authorization problem vulnerability , the vulnerability stems from the file classroom.php function...

Squid proxy DoS

The vulnerability of the Squid proxy server is related to improper blocking of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Golang Authentication Bypass

The vulnerability of the Go programming language is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Glances Central Unauthorized Access

The vulnerability of the Central Browser mode of the Glances monitoring tool is related to a lack of mechanism for verifying the source of the data. Exploiting this vulnerability allows an attacker operating remotely to gain unauthorized access to protected information...

PowerDNS Resource Exhaustion DoS

The vulnerability of the PowerDNS software is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

Go Unlimited Resource DoS

The vulnerability of the Go programming language is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260524-73-0027

Vulnerability in docker-ce related to bypassing the authentication procedure by using an alternate path or channel. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions...

ROS-20260524-73-0046

Vulnerability in nextcloud related to authorization bypass through the use of a user-controlled key. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...

CVE-2025-45145

Follett Software's Destiny Library Manager (a school library resource and collection management system) contains a directory traversal vulnerability in version 22_0_2_rc1 . Remote attackers can exploit this flaw via the image parameter to read arbitrary system and application files. The issue has...