Lucene search
K

11070 matches found

Snyk
Snyk
added 2026/04/14 11:41 p.m.3 views

Infinite loop

Overview iodine is a fast HTTP / Websocket Server with built-in Pub/Sub support with or without Redis, static file support and many other features, optimized for Ruby MRI on Linux / BSD / macOS. Affected versions of this package are vulnerable to Infinite loop through the fiojsonparse function. A...

8.7CVSS5.8AI score0.0006EPSS
Exploits0References2
OSV
OSV
added 2026/04/14 11:41 p.m.2 views

GHSA-2X79-GWQ3-VXXM Uncontrolled resource consumption and loop with unreachable exit condition in facil.io and downstream iodine ruby gem

Summary fiojsonparse can enter an infinite loop when it encounters a nested JSON value starting with i or I. The process spins in user space and pegs one CPU core at 100% instead of returning a parse error. Because iodine vendors the same parser code, the issue also affects iodine when it parses...

8.7CVSS5.9AI score0.0006EPSS
Exploits0References5
Snyk
Snyk
added 2026/04/14 11:30 p.m.4 views

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop in the EncryptedXml class. An attacker can cause an infinite loop and exhaust system resources by submitting specially crafted XML data. Note: The patch in version 10.0.6 introduced a regression and users are strongly...

9.1CVSS6.4AI score0.08014EPSS
Exploits0References2
OSV
OSV
added 2026/04/14 11:30 p.m.1 views

GHSA-37GX-XXP4-5RGX Microsoft Security Advisory CVE-2026-33116 – .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A vulnerability exists in...

7.5CVSS6.2AI score0.08014EPSS
Exploits0References5
EUVD
EUVD
added 2026/04/14 11:30 p.m.3 views

EUVD-2026-22635

Microsoft Security Advisory CVE-2026-33116 – .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability...

7.5CVSS6.2AI score0.08014EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2026/04/14 11:30 p.m.10 views

Microsoft Security Advisory CVE-2026-33116 – .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A vulnerability exists in...

7.5CVSS6.2AI score0.08014EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2026/04/14 6:17 p.m.2 views

CVE-2026-33116

Loop with unreachable exit condition 'infinite loop' in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network...

7.5CVSS0.08014EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/14 4:57 p.m.6 views

CVE-2026-33116

Loop with unreachable exit condition 'infinite loop' in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.08014EPSS
Exploits0References2Affected Software9
AlpineLinux
AlpineLinux
added 2026/04/14 4:57 p.m.0 views

CVE-2026-33116

Loop with unreachable exit condition 'infinite loop' in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.08014EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.5 views

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Loop with unreachable exit condition 'infinite loop' in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network...

7.5CVSS6.2AI score0.08014EPSS
Exploits0
OSV
OSV
added 2026/04/14 11:56 a.m.5 views

CLSA-2026-1776167812 ImageMagick: Fix of 5 CVEs

CVE-2025-53019: fix memory leak in StreamImage with multiple %d in filename template - CVE-2025-55212: fix division-by-zero in ThumbnailImage via zero-dimension geometry - CVE-2026-25795: fix NULL dereference in ReadSFWImage on temp file failure - CVE-2026-25799: fix division-by-zero in YUV...

7.5CVSS6.7AI score0.00395EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2026/04/14 12:0 a.m.2 views

CVE-2026-33116

Loop with unreachable exit condition 'infinite loop' in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network...

7.5CVSS6.2AI score0.08014EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.1 views

PT-2026-32880

Name of the Vulnerable Software and Affected Versions System.Security.Cryptography.Xml versions 10.0.0 through 10.0.5 System.Security.Cryptography.Xml versions 9.0.0 through 9.0.14 System.Security.Cryptography.Xml versions 8.0.0 through 8.0.2 .NET affected versions not specified .NET Framework...

7.8CVSS6.2AI score0.08014EPSS
Exploits0References67
RubySec
RubySec
added 2026/04/14 12:0 a.m.4 views

Uncontrolled resource consumption and loop with unreachable exit condition in facil.io and downstream iodine ruby gem

Summary fiojsonparse can enter an infinite loop when it encounters a nested JSON value starting with i or I. The process spins in user space and pegs one CPU core at 100 instead of returning a parse error. Because iodine gem vendors the same parser code, the issue also affects iodine gem when it...

8.7CVSS5.9AI score0.0006EPSS
Exploits0References1
OSV
OSV
added 2026/04/14 12:0 a.m.1 views

UBUNTU-CVE-2026-33116

Loop with unreachable exit condition 'infinite loop' in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.08014EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-33116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Loop with unreachable exit condition 'infinite loop' in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network...

7.5CVSS6.3AI score0.08014EPSS
Exploits0References2
Amazon
Amazon
added 2026/04/13 12:0 a.m.3 views

Medium: yq

Issue Overview: The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content. CVE-2025-47911 The html.Parse function in golang.org/x/net/html has an...

7.5CVSS7.2AI score0.00044EPSS
Exploits1
OSV
OSV
added 2026/04/11 2:5 p.m.2 views

OESA-2026-1886 expat security update

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.CVE-2026-32776 libexpat...

5.5CVSS5.8AI score0.00006EPSS
Exploits1References3
OSV
OSV
added 2026/04/11 2:5 p.m.2 views

OESA-2026-1885 expat security update

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.CVE-2026-32776 libexpat...

5.5CVSS5.8AI score0.00006EPSS
Exploits1References3
OSV
OSV
added 2026/04/11 2:5 p.m.3 views

OESA-2026-1884 expat security update

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.CVE-2026-32776 libexpat...

5.5CVSS5.8AI score0.00006EPSS
Exploits1References3
Rows per page
Query Builder