170503 matches found
CVE-2026-59248
Allocation of resources without limits vulnerability in ninenines cowlib allows an unauthenticated remote HTTP/2 or HTTP/3 peer to exhaust memory on the vulnerable server or client and cause a denial of service. The HPACK and QPACK prefixed-integer decoder cowhpackcommon:decbigint/3 in...
EUVD-2026-49727
Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default...
CVE-2026-16423
A flaw was found in Google Chrome's user interface UI. A remote attacker could exploit this vulnerability by tricking a user into performing specific UI actions while viewing a specially designed web page. This could lead to heap corruption, potentially allowing the attacker to execute arbitrary...
BIT-DOTNET-2026-50651 .NET Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-51297
...
brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function
A flaw was found in brace-expansion. A remote attacker can exploit this vulnerability by providing specially crafted input to the expand function, which can lead to excessive memory consumption. This can cause a denial of service DoS by crashing the application due to an out-of-memory error...
PT-2026-64980
Name of the Vulnerable Software and Affected Versions SQLite version 3.41 Description A use-after-free flaw exists in the jsonRemoveFunc function of the SQLite JSON module. The issue occurs because a parsed JSON object is freed, but the system subsequently attempts to call jsonLookupStep using th...
ROS-20260724-73-0024
The vulnerability in dotnet10.0 is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2026-56416
A vulnerability in Unbound allows remote attackers using malicious DNSSEC-signed servers to send malformed records that trigger a heap buffer overflow. This can cause a denial of service or potential limited information disclosure. Mitigation To mitigate this issue, consider disabling DNSSEC...
Astra Linux – Vulnerability in Chromium
Side-channel information leakage in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...
The vulnerability of the Dovecot mail server, related to insufficient input validation, allows attackers to trigger a service failure.
The vulnerability of the Dovecot mail server is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of the doveadm component of the Dovecot mail server allows a hacker to gain unauthorized access to protected information.
The vulnerability of the doveadm component of the Dovecot mail server is related to the disclosure of information based on temporal discrepancies. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2026-13182
In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can distinguish decrypt failures from invalid-JSON parse failures, creating an oracle that reveals protected metadata values to remote attackers...
unbound: Unbound: Heap buffer overflow via malformed DNSSEC record
A vulnerability in Unbound allows remote attackers using malicious DNSSEC-signed servers to send malformed records that trigger a heap buffer overflow. This can cause a denial of service or potential limited information disclosure...
CVE-2026-16232
CVE-2026-16232 concerns an authentication bypass in Check Point SmartConsole login. An unauthenticated remote attacker can obtain an application login token and authenticate with full administrative privileges, enabling changes to security policies/configurations. Exploitation requires internet a...
EUVD-2026-47687
In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can distinguish decrypt failures from invalid-JSON parse failures, creating an oracle that reveals protected metadata values to remote attackers...
CVE-2026-13182
The vulnerability CVE-2026-13182 affects Progress Telerik UI for ASP.NET AJAX (RadAsyncUpload) up to version 2026.2.708. The issue arises from RadAsyncUpload client-state processing that can distinguish decrypt failures from invalid-JSON parse failures, creating an oracle that may leak protected ...
EUVD-2026-47306
Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications component: Security. Supported versions that are affected are 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0 and 8.0.1. Easily exploitable vulnerability allows low privileged attacker with network access v...
PT-2026-63490
Name of the Vulnerable Software and Affected Versions BandiZip version 7.37 Description An authentication bypass issue exists that allows remote attackers to circumvent the Mark-of-the-Web protection mechanism. Mark-of-the-Web is a security feature used by operating systems to identify files that...
PT-2026-63396
In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can distinguish decrypt failures from invalid-JSON parse failures, creating an oracle that reveals protected metadata values to remote attackers...