2897 matches found
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: clk-rcg2: Update the logic to calculate the D value for RCG. The display pixel clock has a requirement on certain newer platforms to support M/N as 2/3, and the final D value calculated results in underflow errors. As...
Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: do not trust the firmware’s nChannels value. If the firmware sends us a corrupted MCC response where nChannels is much larger than what the command response can handle, we might copy too much uninitialized...
CVE-2026-15580
vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This issue affects the PassPortal browser extension: before 3.49.6...
EUVD-2026-63972
vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This issue affects the PassPortal browser extension: before 3.49.6...
EUVD-2026-63325
Missing Authorization vulnerability in myCred New User Approve allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects New User Approve: from n/a through 3.2.8...
EUVD-2026-63324
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects InfiniteWP Client: from n/a through 1.13.9...
sqlparse: Quadratic O(n²) DoS in group_comments
SummaryA comment-only statement -- c\nn may cause a Denial of Service DoS. DetailsLocation: sqlparse/engine/grouping.py:331-341 groupcomments, invoked first in group at grouping.py:439. Reachable via sqlparse.parse and sqlparse.formatsql, stripcomments=True.A statement made of many single-line...
CVE-2026-66046
Expat through 2.8.3 has quadratic complexity in storeAtts() in xmlparse.c when processing N attributes with non-normalized values, enabling remote unauthenticated DoS via a small XML document. CVSS 7.5 HIGH. No exploitation observed. Fix: upgrade to patched version (PR #1321).
CVE-2026-66046
Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an ON^2 linear scan of elementType-defaultAtts to determine CDATA status. ...
CVE-2026-66046
Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an ON^2 linear scan of elementType-defaultAtts to determine CDATA status. ...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS via the groupcomments function in sqlparse/engine/grouping.py when parsing a statement composed entirely of comment tokens e.g., repeated -- c\n lines. The function rescans the entire remaining token tail once per...
Regular Expression Denial of Service (ReDoS)
Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the lexer's handling of dollar-quoted literals and multiline comments. The regular expressions used to match $tag$...$tag$ dollar-quoted literals and /.../ multiline comments employed a laz...
GHSA-PWGV-4X5Q-6M9F sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger
Summary sqlparse ships hard limits MAXGROUPINGDEPTH=100, MAXGROUPINGTOKENS=10000 intended to bound parsing work on attacker-supplied SQL, but the path that reaches those limits is itself Ondepth per token-group construction. A 1-2 KB SQL payload e.g. SELECT 1 ... with 500-2000 nesting levels, or ...
sqlparse: Quadratic O(n²) DoS in group_comments
Summary A comment-only statement -- c\nn may cause a Denial of Service DoS. Details Location: sqlparse/engine/grouping.py:331-341 groupcomments, invoked first in group at grouping.py:439. Reachable via sqlparse.parse and sqlparse.formatsql, stripcomments=True. A statement made of many single-line...
BIT-PYTHON-2026-6879 Quadratic Behavior in xml.etree.ElementPath Index Predicates
Element.findall and fully-consumed Element.iterfind exhibit On^2 time complexity when using XPath index predicates e.g. 1, last, last-N on XML documents with many same-tag siblings. Element.find is only affected when the first match is near the end of the sibling list, such as with last or...
BIT-LIBPYTHON-2026-6879 Quadratic Behavior in xml.etree.ElementPath Index Predicates
Element.findall and fully-consumed Element.iterfind exhibit On^2 time complexity when using XPath index predicates e.g. 1, last, last-N on XML documents with many same-tag siblings. Element.find is only affected when the first match is near the end of the sibling list, such as with last or...
CVE-2026-74383
In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix out-of-bounds access in nvmesetupdescriptorpools nvmesetupdescriptorpools indexes dev-descriptorpools using the numanode forwarded from hctx-numanode by its single caller, nvmeinithctxcommon. On a non-NUMA kernel...
CVE-2026-19026
A flaw was found in HDF5. A remote attacker could craft a malicious HDF5 file that, when opened and read, would cause an application using the HDF5 library to crash. This issue stems from improper validation of input data within the N-Bit filter, leading to a denial of service DoS and impacting t...
CVE-2026-73643 js-yaml: Exponential parsing time in the flow collections leads to denial of service
js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential time when an application calls load or loadAll on untrusted input. In src/parser/parser.ts, readFlowCollection uses restoreState and calls parseNode a second time when a...