EulerOS Virtualization 2.10.1 : httpd (EulerOS-SA-2026-2822)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's modmd via OCSP response data.CVE-2026-291...

CVE-2026-47018: Uncontrolled Resource Consumption

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Siebel CRM Cloud...

CVE-2026-61194: Uncontrolled Resource Consumption

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Core. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Agile Engineering Data...

CVE-2026-60425: Uncontrolled Resource Consumption

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware component: OUD Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified...

CVE-2026-60410: Uncontrolled Resource Consumption

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise TimesTen...

PT-2026-62093

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Resource Consumption allows a low-privileged authenticated user with permission to execute EQL sequence queries against an index they control to trigger excessive memory...

PT-2026-61993

Access of resource using incompatible type 'type confusion' in .NET Core allows an unauthorized attacker to deny service over a network...

PT-2026-63265

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An authenticated attacker with low-privilege access can cause a denial of service by sending a specially crafted, oversized request payload. This triggers uncontrolled resource consumption...

CVE-2026-47021: Uncontrolled Resource Consumption

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.1...

CVE-2026-61109: Uncontrolled Resource Consumption

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: JSON. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged...

CVE-2026-63261: Uncontrolled Resource Consumption

Uncontrolled Resource Consumption CWE-400 in Kibana can lead to denial of service via Excessive Allocation CAPEC-130. A low-privileged authenticated user can send a specially crafted request to a Kibana machine learning feature, causing the server to exhaust available memory and become unavailabl...

CVE-2026-61192: Uncontrolled Resource Consumption

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Install. The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Engineering...

PT-2026-63284

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description An authenticated user can cause a denial of service by submitting a specially crafted RFC 4716 SSH2 public key to the SSH key ingestion endpoint. The issue stems from a normalization function...

CVE-2026-61093: Uncontrolled Resource Consumption

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple...

PT-2026-67411

Name of the Vulnerable Software and Affected Versions Grav CMS version 2.0.10 Description A path traversal issue exists in the ImageMedium::watermark function, which passes an unsanitized $image argument to RocketThemeToolboxResourceLocatorUniformResourceLocator::findResource. The file:// scheme...

CVE-2026-56145: Uncontrolled Resource Consumption

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. A low-privileged authenticated user with permission to execute EQL sequence queries against an index they control can send a specially crafted query that triggers excessive...

The vulnerability of the virtio_net_hdr_tnl_from_skb() function in the include/linux/virtio_net.h module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the virtionethdrtnlfromskb function in the include/linux/virtionet.h header of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the SPDY framework for developing network applications, servers, and client protocols using Netty allows attackers to induce service failures.

The vulnerability of the SPDY framework for developing network applications, servers, and client protocols related to Netty is related to the uncontrolled distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

CVE-2026-47044: Uncontrolled Resource Consumption

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

CVE-2026-47041: Uncontrolled Resource Consumption

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...