Lucene search
+L

24300 matches found

Packet Storm News
Packet Storm News
•added 2026/01/07 12:00 a.m.•75 views

Decision-Aware Trust Signal Alignment for SOC Alert Triage

Detection systems that utilize machine learning are progressively implemented at Security Operations Centers SOCs to help an analyst to filter through high volumes of security alerts. Practically, such systems tend to reveal probabilistic results or confidence scores which are ill-calibrated and...

6.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/01/07 12:00 a.m.•16 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-django (UTSA-2026-000164)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000164 advisory. An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could resu...

7.5CVSS6.6AI score0.49527EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/01/07 12:00 a.m.•13 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000331)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000331 advisory. An infinite loop issue was found in the vhostnet kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handlerx. It could...

7.7CVSS6.5AI score0.04345EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
•added 2026/01/06 9:01 a.m.•17 views

ALSA: firewire-motu: add bounds check in put_user loop for DSP events

...

7.1CVSS6.8AI score0.00141EPSS
SaveExploits0
NVD
NVD
•added 2026/01/06 1:16 a.m.•23 views

CVE-2026-21507

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.cpp function, CalcProfileID. This issue is fixed in version 2.3.1.1...

7.5CVSS0.00436EPSS
SaveExploits1References3
osv_debian
osv_debian
•added 2026/01/06 12:15 a.m.•10 views

DEBIAN-CVE-2025-69227

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow for an infinite loop to occur when assert statements are bypassed, resulting in a DoS attack when processing a POST body. If optimizations are enabled -O or PYTHONOPTIMIZE=1, and the...

7.5CVSS7.7AI score0.00396EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/01/06 12:15 a.m.•32 views

AZL-73529 CVE-2025-69227 affecting package python-aiohttp 3.6.2-3

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow for an infinite loop to occur when assert statements are bypassed, resulting in a DoS attack when processing a POST body. If optimizations are enabled -O or PYTHONOPTIMIZE=1, and the...

8.7CVSS7.7AI score0.00396EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/01/06 12:15 a.m.•34 views

AZL-73506 CVE-2025-69227 affecting package python-aiohttp 3.6.2-3

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow for an infinite loop to occur when assert statements are bypassed, resulting in a DoS attack when processing a POST body. If optimizations are enabled -O or PYTHONOPTIMIZE=1, and the...

8.7CVSS7.7AI score0.00396EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/06 12:15 a.m.•23 views

CVE-2025-69227

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow for an infinite loop to occur when assert statements are bypassed, resulting in a DoS attack when processing a POST body. If optimizations are enabled -O or PYTHONOPTIMIZE=1, and the...

8.7CVSS0.00396EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/01/06 12:15 a.m.•17 views

UBUNTU-CVE-2025-69227

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow for an infinite loop to occur when assert statements are bypassed, resulting in a DoS attack when processing a POST body. If optimizations are enabled -O or PYTHONOPTIMIZE=1, and the...

8.7CVSS7.7AI score0.00396EPSS
SaveExploits0References5
CVE
CVE
•added 2026/01/06 12:11 a.m.•44 views

CVE-2026-21507

CVE-2026-21507 affects iccDEV, a library/tools suite for ICC color management. Technical details in connected sources show an infinite loop in IccProfile.cpp CalcProfileID affecting iccDEV versions 2.3.1 and earlier, with the issue fixed in 2.3.1.1. The vulnerability description indicates a poten...

7.5CVSS5.8AI score0.00436EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/06 12:11 a.m.•8 views

CVE-2026-21507 iccDEV is Vulnerable to Denial of Service via Infinite Loop in CalcProfileID()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.cpp function, CalcProfileID. This issue is fixed in version 2.3.1.1...

7.5CVSS5.8AI score0.00436EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/01/06 12:11 a.m.•44 views

CVE-2026-21507 iccDEV is Vulnerable to Denial of Service via Infinite Loop in CalcProfileID()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.cpp function, CalcProfileID. This issue is fixed in version 2.3.1.1...

7.5CVSS0.00436EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/01/06 12:11 a.m.•17 views

EUVD-2026-1147

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.cpp function, CalcProfileID. This issue is fixed in version 2.3.1.1...

7.5CVSS5.8AI score0.00436EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2026/01/06 12:11 a.m.•12 views

CVE-2026-21507 iccDEV is Vulnerable to Denial of Service via Infinite Loop in CalcProfileID()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.cpp function, CalcProfileID. This issue is fixed in version 2.3.1.1...

7.5CVSS6.4AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/01/06 12:00 a.m.•22 views

PT-2026-1362

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.1 Description iccDEV is a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain an infinite loop within the CalcProfileID function in the IccProfile.cpp file...

7.5CVSS5.7AI score0.00436EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
•added 2026/01/06 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-69227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow for an infinite loop to occur when assert...

8.7CVSS7.6AI score0.00396EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/06 12:00 a.m.•5 views

CVE-2026-21507: Loop with Unreachable Exit Condition

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.cpp function, CalcProfileID. This issue is fixed in version 2.3.1.1...

7.5CVSS5.8AI score0.00436EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/06 12:00 a.m.•4 views

CVE-2025-69227: Loop with Unreachable Exit Condition

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow for an infinite loop to occur when assert statements are bypassed, resulting in a DoS attack when processing a POST body. If optimizations are enabled -O or PYTHONOPTIMIZE=1, and the...

8.7CVSS7.7AI score0.00396EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/01/06 12:00 a.m.•28 views

aiohttp security vulnerabilities

aiohttp is an open source aio-libs open source asynchronous HTTP client/server framework for asyncio and Python. A security vulnerability exists in aiohttp 3.13.2 and earlier versions, which stems from an infinite loop that may result from bypassing an assertion statement, possibly leading to a...

8.7CVSS7.4AI score0.00396EPSS
SaveExploits0References1
Rows per page
Query Builder