93997 matches found
CVE-2026-107727
The Strawberry GraphQL library (versions 0.312.3 through 0.327.2 ) contains a vulnerability in the legacy graphql-ws subscription handler located in strawberry/subscriptions/protocols/graphql_ws/handlers.py. The root cause is that the handler fails to remove naturally completed operations from se...
CVE-2026-107727
Strawberry GraphQL is a library for creating GraphQL APIs. From 0.312.3 until 0.327.2, the legacy graphql-ws subscription handler in strawberry/subscriptions/protocols/graphqlws/handlers.py does not remove naturally completed operations from self.tasks and self.subscriptions. When...
CVE-2026-84230
IBM Guardium Data Protection version 12.2.2 is vulnerable to a denial of service (DoS) attack. The root cause is a race condition (CWE-362) triggered by concurrent unsynchronized writes to a shared map. A remote attacker can exploit this to cause the service to become unavailable. IBM has release...
CVE-2026-84230 IBM Guardium Data Protection is affected by multiple vulnerabilities
IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map...
CVE-2026-84247 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...
CVE-2026-104628
Satel Netco Design versions prior to v2.1.7 are vulnerable to an inefficient regular expression complexity vulnerability (CWE-1333). An authenticated user with Viewer privileges can submit specially crafted search input that triggers excessive processing. This flaw can lead to a degradation of th...
CVE-2026-104628 Satel Netco Design Inefficient Regular Expression Complexity
Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerability. An authenticated user with Viewer privileges could submit crafted search input that causes excessive processing, potentially degrading the availability of the application...
encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal
A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...
DEBIAN-CVE-2026-107708
MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a...
AZL-106836 CVE-2026-107708 affecting package krb5 1.21.3-5
MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a...
CVE-2026-107708
MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a...
DEBIAN-CVE-2026-106435
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...
AZL-107129 CVE-2026-106435 affecting package python-pymongo 4.2.0-9
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...
CVE-2026-106435
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...
CVE-2026-12091 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a heap-based out-of-bounds read. A remote attacker could send a specially crafted request that causes a limited out‑of‑bounds memory read...
glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state
A flaw was found in glibc. Converting crafted EUCJISX0213 input to UCS-4 or the internal wide character encoding for example with iconv can cause the converter to make no progress, hanging the calling application. Some EUCJISX0213 sequences decode to two code points; if the output buffer has room...
glibc: Non-progress DoS in SHIFT_JISX0213 ->
A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFTJISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly emit a buffered code point without consuming further input, leading to...
libextractor-ole2-rce
CVE-2026-91752: GNU libextractor Stack Overflow via OLE2 Summary A stack-based buffer overflow in GNU libextractor's OLE2 plugin allows remote denial of service crash and code execution when processing a crafted .doc file. The vulnerability is in processstaroffice ole2extractor.c:349 which...
cve-2026-47627
CVE-2026-47627 — NVIDIA Triton Inference Server Path Traversal → DoS Zip-Slip Writeup lengkap hasil riset & PoC di repo ini image nvcr.io/nvidia/tritonserver:26.05-py3 / server v2.69.0. Repo di-setup untuk selalu explicit agar PoC tanpa restart via gRPC. Daftar Isi 1. Ringkasan CVE 2. Lingkungan...
CVE-2021-35211
Serv-U CVE-2021-35211 Exploit Potential for DoS - check your rules of engagement The exploit doesn't work every time, but it works enough that it will run shellcode in roughly 1 in every 5 or 6 runs. However, sometimes a failed exploit will crash the Serv-U server. Please ensure that your rules o...