53180 matches found
CVE-2026-19587
Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation...
CVE-2026-66878 Multicloud-operators-subscription: multicloud-operators-subscription: fetchchannelreferences honours channel.spec.secretref.namespace enabling cross-namespace secret exfiltration
A flaw was found in multicloud-operators-subscription. A privileged user, specifically a namespace administrator capable of creating Channel and Subscription resources, can exploit this vulnerability. By manipulating the Channel.Spec.SecretRef.Namespace field, the user can cause the system to cop...
CVE-2026-66878
A flaw was found in multicloud-operators-subscription. A privileged user, specifically a namespace administrator capable of creating Channel and Subscription resources, can exploit this vulnerability. By manipulating the Channel.Spec.SecretRef.Namespace field, the user can cause the system to cop...
No title provided
A flaw was found in AMD Zen 2-based processors, affecting components such as the kernel and Xen hypervisor. Improper isolation of shared resources within the CPU operation cache could allow an attacker to corrupt instructions executed at a different privilege level. This could potentially result ...
RHEL 8 : resource-agents (RHSA-2026:47126)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47126 advisory. The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several servic...
PT-2026-71066
A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker to denial of service via...
The vulnerability in the driver/base/regmap/regmap-slimbus.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/base/regmap/regmap-slimbus.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability in the `drivers/net/wireguard/device.c` component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the drivers/net/wireguard/device.c component of the Linux kernel lies in insufficient checks on the status of shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the kernel/futex component of the Linux operating system, which allows a hacker to gain access to confidential data
The vulnerability of the kernel/futex component of the Linux operating system is related to insufficient checking of the state of the shared resource. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
Oracle Linux 8 : resource-agents (ELSA-2026-53364)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-53364 advisory. 4.9.0-54.37 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217924 Tenable has extracted the preceding description block directly from the Oracle Linux...
PT-2026-71107
Name of the Vulnerable Software and Affected Versions JFrog Artifactory affected versions not specified Description A Project Resource Manager may gain broader administrative privileges under specific conditions, leading to privilege escalation. Recommendations At the moment, there is no...
PT-2026-71225
An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before...
PT-2026-71359
Name of the Vulnerable Software and Affected Versions acm-search-v2-rhel9 affected versions not specified Description An attacker with administrative privileges on the hub cluster, specifically those with patch access to the Search Custom Resource CR, can exploit a flaw in the...
The vulnerability of the Linux operating system’s kernel, related to the use of an uninitialized resource, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a attacker to cause a service failure...
The vulnerability of the Query Engine component of the Loki logging aggregation and storage system allows a attacker to trigger a service failure.
The vulnerability of the Query Engine component of the Loki logging aggregation and storage system is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the fs/ntfs3 component in the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the fs/ntfs3 component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-73413: Uncontrolled Resource Consumption
Shescape is a simple shell escape library for JavaScript. From 2.1.11 until 2.1.14 and 3.0.1, the flag-protection loop in compose in src/internal/compose.js repeatedly joins and slices flag fragments when flagProtection is enabled, which is the default, making processing quadratic in input size...
PT-2026-72135
Уязвимость движка Microsoft Malware Protection Engine Защитника Microsoft Windows Defender операционных систем Windows связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю раскрыть защищаемую информацию и получить полный контроль на...
PT-2026-70976
Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation...
RHEL 8 : resource-agents (RHSA-2026:47129)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47129 advisory. The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several servic...