The vulnerability of the h2 library in the Rust programming language, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems allows a hacker to cause a service failure.

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...

cdf

CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...

cve-2026-20833-rc4-kerberos

CVE-2026-20833 — Endurecimiento de Kerberos RC4 Este repositorio consolida documentación técnica , scripts de PowerShell , paneles de Power BI y referencias oficiales de Microsoft relacionadas con la deprecación progresiva de RC4 en Kerberos para entornos de Active Directory , como parte de los...

route-detect

route-detect Find authentication authn and authorization authz security bugs in web application routes: Routes fromkoel streaming server Web application HTTP route authn and authz bugs are some of the most common security issues found today. These industry standard resources highlight the severit...

AlmaLinux 9.6 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-dnssec-doc / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1780593591)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780593591 advisory. - BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumptio...

ROS-20261001-73-0047

The vulnerability in rclone is related to an error in exception handling. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20260930-73-0143

The vulnerability in the drivers/nvme/host/fc.c module of the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-102274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyJWT is a Python implementation of JSON Web Token standards. From 2.9.0 until 2.14.0, PyJWKSet does not catch the plain ValueError raised for malformed RSA JWK...

ROS-20260930-73-0127

The vulnerabilities of the functions cmpcaccelsensitivityshowv4 and cmpcaccelsensitivitystorev4 in the driver/platform/x86/classmate-laptop.c file of the Linux operating system’s X86 kernel device driver are related to pointer manipulation. Exploiting these vulnerabilities can allow attackers to...

ROS-20260930-73-0113

The vulnerability of the Linux operating system’s kernel is related to insufficient checks on the status of resources that are shared among users. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260930-73-0111

The vulnerability of SCSC components in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260930-73-0009

The vulnerability of the osdmapapplyincremental function in the net/ceph/osdmap.c module of the Linux kernel is related to an uncontrolled, exploitable condition. Exploitation of this vulnerability could allow a remote attacker to compromise the integrity of protected information or cause service...

The vulnerabilities of protocols such as BPv6, OpenFlow, and Kafka, as well as the Wireshark traffic analyzer for computer networks, allow attackers to cause service interruptions.

The vulnerability of Dissectors for protocols such as BPv6, OpenFlow, and Kafka, as well as the Wireshark traffic analyzer for computer networks, is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service...

CentOS Linux 7 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-export-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1780969601)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1780969601 advisory. - BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption wh...

ROS-20260929-73-0040

The vulnerability of the cifsconstructtcon function in the fs/smb/client/connect.c module, which is part of the SMB client support in Linux kernel, involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause service...

DEBIAN-CVE-2026-97026

Flatpak creates temporary child repository directories under the user cache with world-writable permissions 0777. On multi-user systems with a permissive umask, other local users could read or modify the temporary directory used while installing apps or runtimes, potentially causing installation...

CVE-2026-97026

Flatpak creates temporary child repository directories under the user cache with world-writable permissions 0777. On multi-user systems with a permissive umask, other local users could read or modify the temporary directory used while installing apps or runtimes, potentially causing installation...

DEBIAN-CVE-2026-102274

PyJWT is a Python implementation of JSON Web Token standards. From 2.9.0 until 2.14.0, PyJWKSet does not catch the plain ValueError raised for malformed RSA JWK components by RSAAlgorithm.fromjwk in jwt/apijwk.py. This occurs when a JWK Set contains a malformed RSA key alongside otherwise usable...

AZL-105236 CVE-2026-102274 affecting package python-jwt 2.13.0-1

PyJWT is a Python implementation of JSON Web Token standards. From 2.9.0 until 2.14.0, PyJWKSet does not catch the plain ValueError raised for malformed RSA JWK components by RSAAlgorithm.fromjwk in jwt/apijwk.py. This occurs when a JWK Set contains a malformed RSA key alongside otherwise usable...