29547 matches found
PT-2026-94977
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel regarding the ordering of reference and unreference operations within the perf/x86/intel/uncore component. In the uncore event cpu online function,...
PT-2026-94718
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7996 mcu get chip config function within the mt76 wifi driver. The response Type-Length-Value TLV loop advances by the tlv-len value without a minimum threshold,...
CVE-2026-52852: Uncontrolled Recursion
Traccar is an open source GPS tracking system. Prior to 6.14.0, an authenticated user with permission to manage groups and request reports can create a cyclic group-parent hierarchy and request a trips or stops report for a device in that hierarchy. org.traccar.api.resource.GroupResource permits...
PT-2026-95062
Name of the Vulnerable Software and Affected Versions Traccar versions prior to 6.14.0 Description An authenticated user with permissions to manage groups and request reports can create a cyclic group-parent hierarchy. When a trips or stops report is requested for a device within this hierarchy,...
PT-2026-94297
Name of the Vulnerable Software and Affected Versions ash authentication versions 4.8.0 through 4.14.9 ash authentication versions 5.0.0-rc.0 through 5.0.0-rc.13 Description An inefficient algorithmic complexity issue allows an unauthenticated attacker to cause CPU and memory exhaustion by...
RockyLinux 9 : microcode_ctl (RLSA-2026:68011)
The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:68011 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...
EulerOS 2.0 SP15 : glib-networking (EulerOS-SA-2026-3804)
According to the versions of the glib-networking package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain ...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the BatchingProcessor. An attacker can exhaust CPU resources and degrade or deny service by continuously filling the asynchronous export buffer while the exporter is backpressured...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the BatchingProcessor. An attacker can exhaust CPU resources and degrade or deny service by continuously filling the asynchronous export buffer while the exporter is backpressured...
CVE-2026-92596
Nodemailer before 9.1.0 contains a quadratic time complexity vulnerability in the addressparser component that allows remote attackers to cause denial of service by supplying a crafted comma-separated address list. Attackers can send a single email with a large number of addresses to block the...
DEBIAN-CVE-2026-81872
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attacker-driven log emission fills its asynchronous export buffer while the exporter is backpressured. NewBatchingProcessor...
AZL-103113 CVE-2026-81872 affecting package azurelinux-image-tools 1.6.0-3
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attacker-driven log emission fills its asynchronous export buffer while the exporter is backpressured. NewBatchingProcessor...
CVE-2026-81872
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attacker-driven log emission fills its asynchronous export buffer while the exporter is backpressured. NewBatchingProcessor...
CVE-2026-20154
A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause high CPU utilization on an affected device...
UBUNTU-CVE-2026-81872
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attacker-driven log emission fills its asynchronous export buffer while the exporter is backpressured. NewBatchingProcessor...
CVE-2026-81872
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attacker-driven log emission fills its asynchronous export buffer while the exporter is backpressured. NewBatchingProcessor...
CVE-2026-81872
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attacker-driven log emission fills its asynchronous export buffer while the exporter is backpressured. NewBatchingProcessor...
CVE-2026-81872 OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attacker-driven log emission fills its asynchronous export buffer while the exporter is backpressured. NewBatchingProcessor...
CVE-2026-81872
OpenTelemetry-Go (the Go implementation of OpenTelemetry) has a denial-of-service vulnerability in its go.opentelemetry.io/otel/sdk/log BatchingProcessor . When attacker-driven log emission fills the asynchronous export buffer while the exporter is backpressured, a failed non-blocking EnqueueExpo...
CVE-2026-81872
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attacker-driven log emission fills its asynchronous export buffer while the exporter is backpressured. NewBatchingProcessor...