1997 matches found
CVE-2019-25342: Allocation of Resources Without Limits or Throttling
Centova Cast 3.2.12 contains a denial of service vulnerability that allows attackers to overwhelm the system by repeatedly calling the database export API endpoint. Attackers can trigger 100% CPU load by sending multiple concurrent requests to the /api.php endpoint with crafted parameters...
PT-2026-7941
Centova Cast 3.2.12 contains a denial of service vulnerability that allows attackers to overwhelm the system by repeatedly calling the database export API endpoint. Attackers can trigger 100% CPU load by sending multiple concurrent requests to the /api.php endpoint with crafted parameters...
CVE-2026-25613 An unsafe cast in the MongoDB query planner can result in a segmentation fault.
An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index...
CVE-2026-25613
CVE-2026-25613 : MongoDB server vulnerability where an authorized user can disable the server by issuing a query against a collection that contains an invalid compound wildcard index. Root cause described in connected documents is related to incorrect data handling of compound wildcard indexes, e...
An unsafe cast in the MongoDB query planner can result in a segmentation fault.
An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index...
CVE-2026-25139
RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. In version 2025.10 and prior, multiple out-of-bounds read allow any unauthenticated user, with ability to send or manipulate input packets, to...
alertwise (1.0.0), cjkcms-seo (2.4.0) +19 more potentially affected by CVE-2026-25517 via wagtail (>=6.0.0rc1, <=6.3.1)
wagtail PYPI version =6.0.0rc1, =6.0.0, =2.1.0, =0.1.1, =1.9.0, =6.0.0, =2.8.0b1, =0.0.9, =0.14.0, =0.14.4 - wagtail-sb-admin-interface 0.7.0 - wagtail-sb-codefield 0.4.0 and more Source cves: CVE-2026-25517 Source advisory: OSV:GHSA-4QVV-G3VR-M348...
Libgcrypt 1.12.0
Libgcrypt is a general-purpose cryptographic library based on the code from GnuPG. It provides functions for all cryptographic building blocks: symmetric ciphers AES, DES, Blowfish, CAST5, Twofish, and Arcfour, hash algorithms MD4, MD5, RIPE-MD160, SHA-1, and TIGER-192, MACs HMAC for all hash...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37803)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37803 advisory. - In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue...
Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2025-58063)
The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-58063 advisory. - CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37858)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37858 advisory. - In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Prevent integer overflow in AG...
kernel: nbd: fix incomplete validation of ioctl arg
A flaw has been found in the Linux kernel’s NBD drivers.The issue stems from incomplete validation of IOCTL arguments passed to the NBD driver. Specifically, oversized or unchecked arguments may lead to a signed integer overflow in blockwritefullpage and misuse of argument values cast to int in...
CVE-2025-71085
In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG in pskbexpandhead as part of calipsoskbuffsetattr There exists a kernel oops caused by a BUGONnhead INTMAX i.e. intskbheadroomskb + lendelta skbheadroomskb is meant to ensure that delta = headroom - skbheadroomskb is...
CVE-2025-71085
CVE-2025-71085: In the Linux kernel, a BUG() in pskb_expand_head() occurs via calipso_skbuff_setattr() due to an implicit integer cast in __skb_cow(). The root cause is headroom > INT_MAX combined with delta
Astra Linux – Vulnerability in Chromium
The poor implementation of the Loader component in Google Chrome before version 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...
agent-manager-sdk (>=0.1.1, <=0.1.2), aipack (>=0.0.1, <=0.0.5) +42 more potentially affected by CVE-2026-21860 via werkzeug (2.0.1)
werkzeug PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - agent-manager-sdk =0.1.1, =0.0.1, =1.0.1, =0.5.5, =0.0.3, =0.2.1, =1.0.0.dev1, =1.5.0rc4, =1.1.4, =0.2.1, =0.2.4 - face-preprocessor 0.0.1 - fam...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992780)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992780 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Prevent integer overflow in AG size calculation The JFS filesystem calculates allocation...
CVE-2023-54238
In the Linux kernel, the following vulnerability has been resolved: mlx5: fix skb leak while fifo resync and push During ptp resync operation SKBs were poped from the fifo but were never freed neither by napiconsume nor by devkfreeskbany. Add call to napiconsumeskb to properly free SKBs. Another...
UBUNTU-CVE-2023-54238
In the Linux kernel, the following vulnerability has been resolved: mlx5: fix skb leak while fifo resync and push During ptp resync operation SKBs were poped from the fifo but were never freed neither by napiconsume nor by devkfreeskbany. Add call to napiconsumeskb to properly free SKBs. Another...
CVE-2023-54238
In the Linux kernel, the following vulnerability has been resolved: mlx5: fix skb leak while fifo resync and push During ptp resync operation SKBs were poped from the fifo but were never freed neither by napiconsume nor by devkfreeskbany. Add call to napiconsumeskb to properly free SKBs. Another...