14974 matches found
Inefficient Algorithmic Complexity
Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the compiler in lib/compiler.js, where processing an array-of-tables header causes a full rescan of every path defined so far. An attacker can supply a TOML document with a large number of...
Exploit for CVE-2026-114509
CVE-2026-114509 — Laravel TokenGuard Authentication Bypass...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143028)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143028 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: focaltech - fix array out-of-bounds in focaltechprocessrelpacket Make finger2 and also...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143093)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143093 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crushdecode CRUSH bucket type 0 is reserved for devices. The...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142710)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142710 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2sumrightmostrec BUG On-disk corruption setting...
CrowdStrike Channel File 291: An Engineering Analysis of a Global Endpoint Outage
On July 19, 2024, a CrowdStrike Falcon content update caused Windows systems to crash, affecting about 8.5 million devices according to a Microsoft estimate. The immediate defect was an inconsistency between a detection template that declared 21 inputs and sensor code that supplied 20. A new...
openSUSE 16 Security Update : python-joserfc (openSUSE-SU-2026:22136-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22136-1 advisory. Changes in python-joserfc: - CVE-2026-102946: JWS signature verification can be bypassed via empty signatures array bsc1285840 Tenable has extracted the...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142681)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142681 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: focaltech - fix array out-of-bounds in focaltechprocessrelpacket Make finger2 and also...
ROS-20261022-73-0068
The vulnerability of the go-git library is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the accessibility of the protected information...
MongoDB C# Driver input validation error vulnerability
A vulnerability related to input validation exists in MongoDB C Driver versions 2.14.0 through 3.13.0. It arises due to the failure to escape dot and dollar signs when processing dictionary keys, field names, and array filter identifiers within LINQ queries. This may result in applications...
CVE-2026-114141
A flaw was found in toml. A remote attacker can trigger a Denial of Service DoS by supplying a crafted TOML document containing a large number of array-of-tables headers. Processing these unpruned headers causes repetitive path scanning that blocks the event loop, rendering the application...
SUSE CVE-2026-98835
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kionix-kx022a: Fix array boundary check The driver performs a sanity check for an array size, when converting a register value to an array index. The check incorrectly accepts the sizeofarray as a last index, when las...
github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in request decoding
A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service DoS by sending specially crafted HTTP requests containing specific array query parameters or form-encoded data. Because the request decoder fails to properly validate certain array schemas before...
qs: qs: Denial of Service via unhandled exception during array serialization
A flaw was found in qs. A remote attacker could cause a Denial of Service DoS by supplying specially crafted input to an application that re-serializes data using the comma array format. Because the library fails to safely handle array elements that cannot be converted to a string, an unhandled...
CVE-2026-114405
Improper validation of array index vulnerability in Velneo vServer. This issue affects vServer: from 36.0 before 36.6 and from 37.0 before 37.2...
CVE-2026-114405 Denial of Service via Malformed VATP Packet in Velneo vServer
Improper validation of array index vulnerability in Velneo vServer. This issue affects vServer: from 36.0 before 36.6 and from 37.0 before 37.2...
CVE-2026-114405
Velneo vServer is vulnerable to a Denial of Service attack due to improper validation of array index (CWE-129). The vulnerability can be triggered by sending a malformed VATP packet . This issue specifically affects versions 36.0 before 36.6 and 37.0 before 37.2 . The CVSS 4.0 score is 8.7 (High)...
EUVD-2026-107231
Improper validation of array index vulnerability in Velneo vServer. This issue affects vServer: from 36.0 before 36.6 and from 37.0 before 37.2...
CVE-2026-54426
Uncontrolled recursion in the Redis reply parser in Apache bRPC 1.18.0 allows a remote Redis server peer to crash a bRPC Redis client process by returning a deeply nested RESP array reply. The parser recursed once for each nested array level without enforcing a depth limit. The fix adds a...
CVE-2026-56388
The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A remote unauthenticated attacker who can reach a bRPC server with Redis service enabled can send an empty array header followed by a bulk string, causing an out-of-bounds write in the parser and...