Lucene search
+L

3103 matches found

OSV
OSV
•added 2026/08/20 11:16 a.m.•12 views

DEBIAN-CVE-2026-73198

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18nmessages endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial o...

7.5CVSS5.6AI score0.00435EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/08/20 10:39 a.m.•11 views

CVE-2026-73198

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18nmessages endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial o...

7.5CVSS5.5AI score0.00435EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/08/20 10:39 a.m.•6 views

CVE-2026-73198 Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18nmessages endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial o...

7.5CVSS5.8AI score0.00435EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/08/20 10:39 a.m.•85 views

CVE-2026-73198 Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18nmessages endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial o...

7.5CVSS0.00435EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/20 10:39 a.m.•6 views

CVE-2026-73198 Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18nmessages endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial o...

7.5CVSS5.6AI score
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/08/20 10:38 a.m.•14 views

CVE-2026-73198

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18nmessages endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial o...

7.5CVSS5.5AI score0.00435EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/20 10:31 a.m.•9 views

CVE-2026-73197 Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...

7.5CVSS5.4AI score0.00435EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/20 10:31 a.m.•19 views

CVE-2026-73197 Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...

7.5CVSS5.6AI score
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/08/20 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-73198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18nmessages endpoint by sending an arbitrarily large...

7.5CVSS5.7AI score0.00435EPSS
SaveExploits0References4
Snyk
Snyk
•added 2026/08/20 12:00 a.m.•12 views

HTTP Response Splitting

Overview org.springframework:spring-web is a package that provides a comprehensive programming and configuration model for modern Java-based enterprise applications - on any kind of deployment platform. Affected versions of this package are vulnerable to HTTP Response Splitting via the...

6.3CVSS5.9AI score0.00256EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/20 12:00 a.m.•20 views

PT-2026-78919

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18n messages endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial ...

7.5CVSS5.4AI score0.00435EPSS
SaveExploits0References3
Spring Security Advisories
Spring Security Advisories
•added 2026/08/20 12:00 a.m.•13 views

cve-2026-47860 - MEDIUM - Unbounded decompression of attacker-supplied compressed message bodies

cve-2026-47860 - MEDIUM - Unbounded decompression of attacker-supplied compressed message bodies...

6.5CVSS5.2AI score0.0042EPSS
SaveExploits0
OSV
OSV
•added 2026/08/19 3:03 p.m.•5 views

CLSA-2026-1787151794 TuxCare security update for body-parser (1 CVE)

TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.19.0-tuxcare.2...

5.9CVSS5.8AI score0.00412EPSS
SaveExploits0
OSV
OSV
•added 2026/08/19 3:01 p.m.•3 views

CLSA-2026-1787151664 TuxCare security update for body-parser (1 CVE)

TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.14.2-tuxcare.3...

5.9CVSS5.8AI score0.00412EPSS
SaveExploits0
OSV
OSV
•added 2026/08/19 3:00 p.m.•3 views

CLSA-2026-1787151610 TuxCare security update for body-parser (1 CVE)

TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.13.3-tuxcare.2...

5.9CVSS5.8AI score0.00412EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2026/08/19 12:00 a.m.•38 views

MLflow Server-Side Request Forgery Vulnerability

MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive responsestatus and responsebody...

9.3CVSS8.1AI score0.09839EPSS
SaveIn wildExploits3
Snyk
Snyk
•added 2026/08/18 11:10 p.m.•14 views

Improper Validation of Specified Type of Input

Overview fastify is an overhead web framework, for Node.js. Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via the request validation path in lib/validation.js. An attacker can bypass body schema type enforcement by sending a root-level primitiv...

5.4CVSS5.6AI score0.00309EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/08/18 8:19 p.m.•13 views

CVE-2026-18504 fastify vulnerable to schema validation bypass via root primitive coercion mismatch

fastify is a fast and low overhead web framework for Node.js. Versions of fastify before 5.12.1 are affected by a schema validation bypass when a request body schema targets a root primitive value. When the schema validates a top-level primitive such as an integer, Ajv can coerce a JSON string in...

5.4CVSS5.4AI score0.00309EPSS
SaveExploits1References2
NVD
NVD
•added 2026/08/18 8:17 p.m.•12 views

CVE-2026-52736

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a remote unauthenticated P2P peer can stall a Zebra node by racing an invalid block body against the valid canonical body for the same block header hash. ZIP-244 permits the attacker to mutate coinbase scriptSig authentication data...

8.7CVSS0.0061EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/18 7:26 p.m.•23 views

EUVD-2026-61171

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a remote unauthenticated P2P peer can stall a Zebra node by racing an invalid block body against the valid canonical body for the same block header hash. ZIP-244 permits the attacker to mutate coinbase scriptSig authentication data...

8.7CVSS5.4AI score0.0061EPSS
SaveExploits0References3
Rows per page
Query Builder