Lucene search
K

11098 matches found

Vulnrichment
Vulnrichment
added 2026/02/19 8:58 p.m.3 views

CVE-2026-27114 NanaZip has ROMFS Archive Infinite Loop

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular NextOffset chains cause an infinite loop in the ROMFS archive parser. Version 6.0.1630.0 patches the issue...

5.1CVSS5.3AI score0.00267EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/02/19 8:58 p.m.2 views

CVE-2026-27114

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular NextOffset chains cause an infinite loop in the ROMFS archive parser. Version 6.0.1630.0 patches the issue...

5.1CVSS5.5AI score0.00267EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2026/02/19 8:58 p.m.11 views

CVE-2026-27114

NanaZip has an infinite-loop vulnerability in its ROMFS archive parser caused by circular NextOffset chains in versions 5.0.1252.0 through before 6.0.1630.0. Version 6.0.1630.0 patches the issue. Affected component: ROMFS archive parsing within NanaZip. Impact (as stated): availability is HIGH, w...

7.5CVSS5.3AI score0.00267EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2026/02/19 8:58 p.m.19 views

CVE-2026-27114 NanaZip has ROMFS Archive Infinite Loop

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular NextOffset chains cause an infinite loop in the ROMFS archive parser. Version 6.0.1630.0 patches the issue...

5.1CVSS0.00267EPSS
Exploits1References2
OSV
OSV
added 2026/02/19 8:58 p.m.3 views

CVE-2026-27114 NanaZip has ROMFS Archive Infinite Loop

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular NextOffset chains cause an infinite loop in the ROMFS archive parser. Version 6.0.1630.0 patches the issue...

5.1CVSS5.5AI score0.00267EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/02/19 8:45 p.m.20 views

CVE-2026-27014 NanZip has ROMFS Archive Infinite Loop / Stack Overflow

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular NextOffset chains cause an infinite loop, and deeply nested directories cause unbounded recursion stack overflow in the ROMFS archive parser. Version 6.0.1630.0 patches the issue...

5.1CVSS0.00152EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/02/19 8:45 p.m.3 views

CVE-2026-27014

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular NextOffset chains cause an infinite loop, and deeply nested directories cause unbounded recursion stack overflow in the ROMFS archive parser. Version 6.0.1630.0 patches the issue...

5.1CVSS5.5AI score0.00152EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/19 8:45 p.m.3 views

CVE-2026-27014 NanZip has ROMFS Archive Infinite Loop / Stack Overflow

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular NextOffset chains cause an infinite loop, and deeply nested directories cause unbounded recursion stack overflow in the ROMFS archive parser. Version 6.0.1630.0 patches the issue...

5.1CVSS5.5AI score0.00152EPSS
Exploits1References1
CVE
CVE
added 2026/02/19 8:45 p.m.11 views

CVE-2026-27014

CVE-2026-27014 affects NanaZip’s ROMFS archive parser. From the provided records, versions before 6.0.1630.0 (specifically starting 5.0.1252.0 up to

5.5CVSS5.5AI score0.00152EPSS
Exploits1References1Affected Software1
SUSE CVE
SUSE CVE
added 2026/02/19 12:26 a.m.4 views

SUSE CVE-2026-23220

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix infinite loop caused by nextsmb2rcvhdroff reset in error paths The problem occurs when a signed request fails smb2 signature verification check. In processrequest, if checksignreq returns an error, setsmb2rspstatuswork...

7.5CVSS5.7AI score0.00118EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2026/02/19 12:25 a.m.0 views

SUSE CVE-2026-27171

zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition...

5.3CVSS5.8AI score0.00204EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.3 views

PT-2026-20940

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular NextOffset chains cause an infinite loop in the ROMFS archive parser. Version 6.0.1630.0 patches the issue...

5.1CVSS5.5AI score0.00267EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2026/02/19 12:0 a.m.7 views

Amazon Linux 2023 : ecs-init (ALAS2023-2026-1443)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1443 advisory. The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially...

10CVSS7.3AI score0.00789EPSS
Exploits3References14
Snyk
Snyk
added 2026/02/18 10:40 p.m.3 views

Infinite loop

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Infinite loop in the children function in generic/datastructures.py‎, which fails to return from nodes with cyclic links in a...

6.9CVSS5.5AI score0.00168EPSS
Exploits0References2
OSV
OSV
added 2026/02/18 10:40 p.m.1 views

GHSA-996Q-PR4M-CVGQ pypdf has a possible infinite loop when processing TreeObject

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires accessing the children of a TreeObject, for example as part of outlines. Patches This has been fixed in pypdf==6.7.1. Workarounds If you cannot upgrade yet, consider applying the changes...

6.9CVSS5.8AI score0.00168EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2026/02/18 10:40 p.m.4 views

pypdf has a possible infinite loop when processing TreeObject

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires accessing the children of a TreeObject, for example as part of outlines. Patches This has been fixed in pypdf==6.7.1. Workarounds If you cannot upgrade yet, consider applying the changes...

6.9CVSS5.5AI score0.00168EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2026/02/18 4:22 p.m.9 views

CVE-2026-23220

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix infinite loop caused by nextsmb2rcvhdroff reset in error paths The problem occurs when a signed request fails smb2 signature verification check. In processrequest, if checksignreq returns an error, setsmb2rspstatuswork...

5.5CVSS0.00118EPSS
Exploits0References8
UbuntuCve
UbuntuCve
added 2026/02/18 4:22 p.m.2 views

CVE-2026-23220

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix infinite loop caused by nextsmb2rcvhdroff reset in error paths The problem occurs when a signed request fails smb2 signature verification check. In processrequest, if checksignreq returns an error, setsmb2rspstatuswork...

5.5CVSS5.7AI score0.00118EPSS
Exploits0References5
OSV
OSV
added 2026/02/18 4:22 p.m.4 views

UBUNTU-CVE-2026-23220

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix infinite loop caused by nextsmb2rcvhdroff reset in error paths The problem occurs when a signed request fails smb2 signature verification check. In processrequest, if checksignreq returns an error, setsmb2rspstatuswork...

5.5CVSS5.7AI score0.00118EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/02/18 2:53 p.m.4 views

CVE-2026-23220

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix infinite loop caused by nextsmb2rcvhdroff reset in error paths The problem occurs when a signed request fails smb2 signature verification check. In processrequest, if checksignreq returns an error, setsmb2rspstatuswork...

5.5CVSS5.1AI score0.00118EPSS
Exploits0References8Affected Software1
Rows per page
Query Builder