48769 matches found
Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP module and Ethernet module Improper Resource Shutdown or Release (CVE-2026-1876)
Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attacker to cause a denial- of-service DoS condition on the products by continuously sending UDP packets to the products. ...
CVE-2026-52371
CVE-2026-52371 describes a Server-Side Request Forgery (SSRF) in the xxl-job-admin/jobinfo/trigger endpoint of xxl-job v3.4.0. The issue enables authenticated attackers to scan internal resources by sending a crafted HTTP request. The available documents identify the affected software/component a...
CVE-2026-52371
A Server-Side Request Forgery SSRF in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 allows authenticated attackers to scan resources via supplying a crafted HTTP request...
AlmaLinux 10 : unbound (ALSA-2026:36320)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:36320 advisory. unbound: Unbound: Denial of Service via excessive EDNS options CVE-2026-41292 unbound: Unbound: Cache manipulation via 'ghost domain names' attack...
Linux Distros Unpatched Vulnerability : CVE-2026-18358
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming...
The vulnerability of the Grafana monitoring and observation platform, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the Grafana monitoring and observation platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the JDBC driver pgjdbc, related to unlimited resource allocation, allows attackers to cause service failures.
The vulnerability of the JDBC driver pgjdbc is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Unbound DNS server, related to excessive resource consumption during the cycle, allows a hacker to cause a service failure.
The vulnerability of the Unbound DNS server is related to excessive resource consumption during the cycle. Exploiting this vulnerability allows a malicious actor to cause service failures...
The vulnerability of the WebShare component of the Google Chrome browser, which allows a hacker to trigger a service failure.
The vulnerability of the WebShare component of the Google Chrome browser is related to insufficient resource management during its existence. Exploiting this vulnerability could allow a hacker to cause a service failure...
The vulnerability of the Unbound DNS server, related to excessive resource consumption during the cycle, allows a hacker to cause a service failure.
The vulnerability of the Unbound DNS server is related to excessive resource consumption during the cycle. Exploiting this vulnerability allows a malicious actor to cause service failures...
The vulnerability of the Python relenv tool for creating reproducible and portable environments is related to insufficient resource control during its existence. This allows a malicious actor to trigger a service failure.
The vulnerability of the Python relenv tool for creating reproducible and portable environments is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to cause service failures...
CVE-2026-65835 Capsule: Incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation)
Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.8, after the incomplete CVE-2026-22872 fix, TenantResource RawItems and Generators in internal/controllers/resources/collect.go, including handleRawItem and handleGeneratorItem, did not apply the...
CVE-2026-65835
Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.8, after the incomplete CVE-2026-22872 fix, TenantResource RawItems and Generators in internal/controllers/resources/collect.go, including handleRawItem and handleGeneratorItem, did not apply the...
AZL-94397 CVE-2026-59881 affecting package python-aiohttp 3.6.2-3
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated, allowing a malicious server to cause unexpected CPU and memory...
CVE-2026-12733
IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations...
CVE-2026-10700
IBM Langflow OSS 1.0.0 through 1.8.4 contains multiple broken access control vulnerabilities in its file handling API that allow unauthorized access to user files.The /api/v1/files/images/flowid/filename endpoint does not enforce authentication or authorization checks, allowing unauthenticated...
CVE-2026-12733
IBM DataPower Gateway is affected by CVE-2026-12733 where denial of service can occur due to improper resource limitations (CWE-770). The advisory lists affected products/versions: DataPower Gateway 10.6CD (10.6.1–10.6.6), 10.6.0 (10.6.0.0–10.6.0.9), 11.0.0 (11.0.0.0–11.0.0.1), and 10.5.0 (10.5.0...
CVE-2026-12733
IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations...
