Lucene search
+L

20582 matches found

Positive Technologies
Positive Technologies
•added 2026/07/22 12:00 a.m.•27 views

PT-2026-63443

Name of the Vulnerable Software and Affected Versions FFmpeg versions 0.6.3 through 8.1.2 Description An infinite loop exists in the RTP/ASF demuxer within libavformat/rtpdec asf.c. This occurs because the rtp asf fix header function does not validate a minimum chunksize when iterating over ASF...

9.8CVSS5.2AI score0.00851EPSS
SaveExploits1References123
Positive Technologies
Positive Technologies
•added 2026/07/22 12:00 a.m.•26 views

PT-2026-63473

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description An authenticated user can cause excessive CPU consumption or out-of-memory conditions on a server by sending a crafted Queryable Encryption find payload. This occurs because an unvalidated...

7.1CVSS5.2AI score0.00291EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2026/07/22 12:00 a.m.•13 views

The vulnerability of the OLERead::read() function in the src/PhpSpreadsheet/Shared/OLERead.php script of the PhpSpreadsheet library allows a hacker to trigger a service failure.

The vulnerability of the OLERead::read function in the src/PhpSpreadsheet/Shared/OLERead.php script of the PhpSpreadsheet library is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.8CVSS6.1AI score0.007EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/22 12:00 a.m.•39 views

PT-2026-63328

Name of the Vulnerable Software and Affected Versions fflate versions prior to 0.8.3 Description A denial of service occurs due to an infinite loop in the unzipSync function. This happens when processing a specially crafted ZIP archive where a central directory entry declares compressed size as...

8.7CVSS5.7AI score0.00488EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/22 12:00 a.m.•0 views

CVE-2026-64834: Loop with Unreachable Exit Condition

FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdecasf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtpasffixheader function fails to validate a minimum chunksize when...

8.7CVSS5.8AI score0.00727EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2026/07/22 12:00 a.m.•6 views

The vulnerability of the loop_set_status_from_info() function in the drivers/block/loop.c module of the Linux kernel’s block devices driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the loopsetstatusfrominfo function in the drivers/block/loop.c module of the Linux kernel’s block devices driver is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

6.7CVSS5.5AI score0.00276EPSS
SaveExploits0References17Affected Software2
RedhatCVE
RedhatCVE
•added 2026/07/21 11:35 p.m.•19 views

CVE-2026-63982

A flaw was found in the Linux kernel's network scheduler component. This vulnerability occurs when the mirred action, used for redirecting network traffic, fails to properly detect a redirection loop. An attacker can exploit this by crafting specific network configurations that cause packets to b...

5.5CVSS5.5AI score0.00206EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/07/21 11:35 p.m.•22 views

CVE-2026-63983

A flaw was found in the Linux kernel's network emulator netem component. This vulnerability occurs when netem duplicates a packet and re-enqueues it, leading to a recursive packet duplication loop if multiple netem instances are configured. This uncontrolled recursion can exhaust system resources...

5.5CVSS5.4AI score0.00206EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/07/21 11:05 p.m.•22 views

CVE-2026-63969

A flaw was found in the Linux kernel's IPv6 networking subsystem. A local attacker could trigger an infinite loop within the rt6fillnode function. This occurs when a writer removes an entry from a list without proper synchronization, causing a softirq-side process to continuously loop. The...

5.5CVSS5.4AI score0.00211EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/07/21 9:32 p.m.•10 views

golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...

7.2AI score0.00475EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/07/21 9:32 p.m.•11 views

EUVD-2026-46384

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

5.2AI score0.00475EPSS
SaveExploits0References4
NVD
NVD
•added 2026/07/21 8:17 p.m.•12 views

CVE-2026-56852

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

7.5CVSS0.00475EPSS
SaveExploits0References3
OSV
OSV
•added 2026/07/21 8:17 p.m.•14 views

AZL-93141 CVE-2026-56852 affecting package cert-manager for versions less than 1.12.15-11

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

7.5CVSS7.2AI score0.00475EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/21 8:17 p.m.•14 views

AZL-93078 CVE-2026-56852 affecting package buildah 1.43.1-3

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

7.5CVSS6.6AI score0.00475EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/21 8:17 p.m.•11 views

AZL-93213 CVE-2026-56852 affecting package kata-containers-cc for versions less than 3.15.0.aks0-16

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

7.5CVSS7.2AI score0.00475EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/21 8:17 p.m.•15 views

AZL-93093 CVE-2026-56852 affecting package podman 5.6.1-10

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

7.5CVSS6.6AI score0.00475EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/21 8:17 p.m.•9 views

AZL-93105 CVE-2026-56852 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-6

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

7.5CVSS7.2AI score0.00475EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/21 8:17 p.m.•12 views

DEBIAN-CVE-2026-56852

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

7.5CVSS5.2AI score0.00475EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/21 8:17 p.m.•13 views

AZL-93228 CVE-2026-56852 affecting package kured for versions less than 1.15.0-6

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

7.5CVSS7.2AI score0.00475EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/21 8:17 p.m.•12 views

AZL-93273 CVE-2026-56852 affecting package opa for versions less than 0.63.0-5

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

7.5CVSS7.2AI score0.00475EPSS
SaveExploits0References1
Rows per page
Query Builder