Lucene search
+L

61400 matches found

OSV
OSV
added 2026/08/13 5:24 p.m.21 views

CVE-2026-73561 Hub: Unauthenticated WebSocket RPC Waiter Resource Exhaustion

Hub is a Node.js WebSocket server and client with added features. Prior to 0.2.16, every incoming unauthenticated WebSocket connection triggers loadDefaultConnectionEventListeners to call requestClientId, which calls rpc.send for the get-client-id action and pushes a request into RPC.requests. Th...

7.5CVSS5.5AI score
SaveExploits0References5
CVE
CVE
added 2026/08/13 5:24 p.m.45 views

CVE-2026-73561

CVE-2026-73561 describes an unauthenticated DoS in the Hub Node.js WebSocket server. For every new WebSocket, Hub registers a listener that triggers an RPC path: get-client-id is sent via RPC, the request is stored in RPC.requests, and a polling interval (setInterval every 10 ms) checks for a mat...

7.5CVSS5.3AI score0.00524EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/13 5:24 p.m.38 views

CVE-2026-73561 Hub: Unauthenticated WebSocket RPC Waiter Resource Exhaustion

Hub is a Node.js WebSocket server and client with added features. Prior to 0.2.16, every incoming unauthenticated WebSocket connection triggers loadDefaultConnectionEventListeners to call requestClientId, which calls rpc.send for the get-client-id action and pushes a request into RPC.requests. Th...

7.5CVSS0.00524EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/08/13 5:24 p.m.9 views

CVE-2026-73561 Hub: Unauthenticated WebSocket RPC Waiter Resource Exhaustion

Hub is a Node.js WebSocket server and client with added features. Prior to 0.2.16, every incoming unauthenticated WebSocket connection triggers loadDefaultConnectionEventListeners to call requestClientId, which calls rpc.send for the get-client-id action and pushes a request into RPC.requests. Th...

7.5CVSS5.3AI score0.00524EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/13 5:19 p.m.9 views

CVE-2026-12236 Infinite loop (DoS) in Bluetooth GATT client parsing of Read-By-Type responses with zero data length

The Bluetooth host GATT client function parsereadstdchardesc in subsys/bluetooth/host/gatt.c parses an ATT Read By Type Response received from a remote GATT server during BTGATTDISCOVERSTDCHARDESC discovery. The per-entry stride rsp-len is taken directly from the peer's PDU, and the parse loop bo...

6.5CVSS5.6AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/13 5:19 p.m.39 views

CVE-2026-12236 Infinite loop (DoS) in Bluetooth GATT client parsing of Read-By-Type responses with zero data length

The Bluetooth host GATT client function parsereadstdchardesc in subsys/bluetooth/host/gatt.c parses an ATT Read By Type Response received from a remote GATT server during BTGATTDISCOVERSTDCHARDESC discovery. The per-entry stride rsp-len is taken directly from the peer's PDU, and the parse loop bo...

6.5CVSS0.00102EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/13 5:19 p.m.42 views

CVE-2026-12236

The CVE concerns the Zephyr Bluetooth host GATT client, where parse_read_std_char_desc() can loop indefinitely if an attacker causes a peer to reply with rsp->len = 0 during BT_GATT_DISCOVER_STD_CHAR_DESC. The loop uses rsp->len to advance the pointer and decrement remaining length, but rsp...

6.5CVSS5.5AI score0.00102EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/13 5:19 p.m.11 views

CVE-2026-12236 Infinite loop (DoS) in Bluetooth GATT client parsing of Read-By-Type responses with zero data length

The Bluetooth host GATT client function parsereadstdchardesc in subsys/bluetooth/host/gatt.c parses an ATT Read By Type Response received from a remote GATT server during BTGATTDISCOVERSTDCHARDESC discovery. The per-entry stride rsp-len is taken directly from the peer's PDU, and the parse loop bo...

6.5CVSS5.5AI score0.00102EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/13 5:17 p.m.9 views

CVE-2026-59763

Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads...

4.3CVSS0.00238EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/13 5:17 p.m.13 views

CVE-2026-58436

ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests...

7.5CVSS0.00335EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/13 5:17 p.m.11 views

CVE-2026-55984

Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...

2.7CVSS0.00336EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/13 5:17 p.m.12 views

CVE-2026-13051

Form::Processor::Field::HtmlArea versions from 0.06 through 1.162360 for Perl allow attacker selected method dispatch and resource exhaustion via an HTML::Tidy diagnostic that validate passes to adderror as a Locale::Maketext template. validate runs HTML::Tidy over the submitted markup and passes...

9.1CVSS0.00451EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/13 4:44 p.m.19 views

EUVD-2026-58163

ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests...

8.5AI score0.00335EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/13 4:44 p.m.61 views

CVE-2026-58436

ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests...

8.5AI score0.00335EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/13 4:44 p.m.38 views

CVE-2026-58436 ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests

ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests...

0.00335EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/13 4:44 p.m.11 views

CVE-2026-58436 ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests

ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests...

7.5CVSS5.3AI score
SaveExploits0References5
OSV
OSV
added 2026/08/13 4:44 p.m.13 views

CVE-2026-55984 Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service

Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...

2.7CVSS5.4AI score
SaveExploits0References5
CVE
CVE
added 2026/08/13 4:44 p.m.56 views

CVE-2026-55984

Gitea is affected by a Null Pointer Dereference in the AddTime API , which can lead to an Authenticated Denial of Service . This vulnerability specifically impacts the gitea.dev component. Users are encouraged to upgrade to Gitea version v1.27.0 , which includes security fixes for this issue and ...

5.7AI score0.00336EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/13 4:44 p.m.38 views

CVE-2026-55984 Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service

Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...

0.00336EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/08/13 4:44 p.m.10 views

CVE-2026-55984 Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service

Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...

5.6AI score0.00336EPSS
SaveExploits0References3
Rows per page
Query Builder