The vulnerability of the ManageSieve mail server services Dovecot and OX Dovecot Pro, related to uncontrolled resource consumption, allows a hacker to cause service failures.

The vulnerability of the Dovecot and OX Dovecot Pro mail server services is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of Dovecot and OX Dovecot Pro mail servers, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of Dovecot and OX Dovecot Pro mail servers is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the ManageSieve mail server services Dovecot and OX Dovecot Pro, related to uncontrolled resource consumption, allows a hacker to cause service failures.

The vulnerability of the Dovecot and OX Dovecot Pro mail server services is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20260723-73-0004

The vulnerability in Chromium is related to insufficient resource management during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-15630: Improper Privilege Management

A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exploiting a mismatch between authorization based on ?id= and action based on request body...

CVE-2026-47769: Missing Authentication for Critical Function

APIFold reads an OpenAPI 3.x or Swagger 2.x specification and generates a live, production-ready MCP server endpoint. Prior to commit 7f19b52280f414f57af2b79a95333d1c8fbeece5, the /webhooks/:serverSlug/:eventName endpoint accepts arbitrary unauthenticated JSON and stores it in Redis and the...

CVE-2026-21723: Uncontrolled Resource Consumption

The alertmanager templates test endpoint /api/alertmanager/grafana/config/api/v1/templates/test can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-30672)

Chrome is a web browser developed by Google. Google Chrome has a resource management vulnerability, which stems from issues with reusing resources after they have been released in the Ozone component. Attackers can exploit this vulnerability by inducing specific UI gestures on users’ devices,...

CVE-2026-16756: Allocation of Resources Without Limits or Throttling

Missing connection and header-read timeouts and the absence of a concurrent-connection cap in the default serve path of Amazon aws-smithy-http-server might allow remote attackers to cause a denial of service by opening many connections and sending partial requests that are never completed,...

ROS-20260723-73-0006

The vulnerability in Chromium is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260723-73-0067

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-30675)

Google Chrome is a cross-platform web browser developed by Google Inc. of the United States. There are security vulnerabilities in Google Chrome. Attackers can exploit these vulnerabilities by using specially crafted HTML pages to induce users to perform certain UI gestures, thereby exploiting he...

PT-2026-63588

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...

PT-2026-63604

Name of the Vulnerable Software and Affected Versions Cache Cleaner Pro extension for Joomla affected versions not specified Description CDN credentials are exposed within administrator request URLs, potentially allowing unauthorized access to the Content Delivery Network configuration...

PT-2026-63580

The Lumise Product Designer for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' and 'table' parameters in the uploaded cart JSON file processed by the checkout AJAX action in versions up to, and including, 2.1.1. This is due to insufficient escaping on the user-suppli...

ROS-20260723-73-0041

The vulnerability in Chromium is related to insufficient resource management during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-64001

Allocation of resources without limits or throttling vulnerability in BizimHesap Information Systems Industry and Trade Inc. Online Pre-Accounting Software allows Excessive Allocation. This issue affects Online Pre-Accounting Software: through 17072026...

RockyLinux 9 : .NET 8.0 (RLSA-2026:41894)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:41894 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...

RockyLinux 10 : .NET 9.0 (RLSA-2026:41895)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:41895 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...

Allocation of Resources Without Limits or Throttling

Overview next is a react framework. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the areAllActionIdsValid validation in server action form submission handling. An attacker can exhaust CPU and block other requests in the same...