Lucene search
+L

107218 matches found

RedHat Linux
RedHat Linux
added 2026/07/27 3:27 p.m.8 views

dovecot: Dovecot: Denial of Service via excessive IMAP bracing

A flaw was found in Dovecot. A remote attacker can exploit this vulnerability by sending excessive open braces over the Internet Message Access Protocol IMAP, leading to uncontrolled memory usage. This can cause the affected system to consume memory up to its configured limit, resulting in a Deni...

7.5CVSS5.8AI score0.00621EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/07/27 3:23 p.m.6 views

CVE-2026-56819

A flaw was found in Netty, a network application framework. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP/2 DATA frames to applications that use Netty and have HTTP/2 content decompression enabled. This can lead to memory exhaustion, causing t...

7.5CVSS5.8AI score0.00365EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
added 2026/07/27 3:22 p.m.8 views

CVE-2026-55831

A flaw was found in Netty, a network application framework. A remote attacker, by sending a specially crafted SPDY/3.1 SETTINGS frame, could cause the SPDY SETTINGS decoder to create a large number of map entries. This excessive processing and memory allocation can lead to a denial of service DoS...

7.5CVSS5.8AI score0.00423EPSS
SaveExploits1References8
ATTACKERKB
ATTACKERKB
added 2026/07/27 2:58 p.m.9 views

CVE-2026-42792

Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts epmd allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon epmd via connection slot exhaustion. The doaccept function in erts/epmd/src/epmdsrv.c calls epmdcleanupexit when accep...

6.3CVSS5.9AI score0.00387EPSS
SaveExploits0References6Affected Software1
Vulnrichment
Vulnrichment
added 2026/07/27 2:39 p.m.8 views

CVE-2026-58227 TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain

The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In sslcertificate:handleincompletechain/5, the received chain is passed to sslcertificate:buildcertificatechain/5, which walks issuer relationships via...

8.7CVSS6AI score0.0035EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/07/27 2:7 p.m.10 views

CVE-2026-55973

A flaw was found in Unbound. When the 'dns-error-reporting: yes' option is enabled, a remote attacker can send a specially crafted DNS response containing a malformed EDNS Report-Channel option from a delegated zone they control. This can lead to a stack variable overwrite, causing the Unbound...

7.5CVSS5.8AI score0.00291EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/27 1:2 p.m.8 views

CVE-2026-44891

A flaw was found in Netty, a network application framework, specifically within the StompSubframeDecoder component. This vulnerability allows a remote attacker to cause a denial of service DoS by sending a large number of small headers. The decoder fails to properly limit the total number or...

7.5CVSS5.8AI score0.00423EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
added 2026/07/27 9:42 a.m.6 views

CVE-2026-16807

A flaw was found in the Codecs component of Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability through a specially crafted HTML page. This could potentially allow the attacker to bypass security restrictions and gain unauthorized access to the underlying system...

8.8CVSS5.8AI score0.00263EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/07/27 7:42 a.m.18 views

CVE-2026-64431

A flaw was found in the Linux kernel's NTFS file system driver. A remote attacker could exploit this vulnerability by providing a specially crafted NTFS image, leading to out-of-bounds memory access. This memory corruption can cause the system to crash, resulting in a denial of service...

7.8CVSS5.9AI score0.00123EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/27 5:40 a.m.6 views

BIT-DOTNET-2026-50648 .NET Framework Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network...

7.5CVSS7AI score0.0084EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/27 5:39 a.m.7 views

BIT-DOTNET-SDK-2026-50527 .NET Framework Denial of Service Vulnerability

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network...

7.5CVSS7.3AI score0.0084EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/27 5:39 a.m.8 views

BIT-DOTNET-SDK-2026-47304 .NET Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...

9.8CVSS5.8AI score0.00216EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/07/27 4:16 a.m.127 views

Cisco ASA - Local File Inclusion

Cisco Adaptive Security Appliances ASA web interfaces could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. It is also possible on certain software releases that the ASA will not reload, but an attacker...

7.5CVSS7.1AI score0.99903EPSS
SaveExploits18References5
RedHat Linux
RedHat Linux
added 2026/07/27 3:46 a.m.10 views

librenswan: IKEv2 Denial of Service via malformed fragmentation

A flaw was found in Libreswan's IKEv2 fragment reassembly mechanism. When a VPN gateway processes incoming split network packets fragments containing unexpected data, an off-by-one boundary validation error triggers an internal program safety check assertion failure. A remote, unauthenticated...

7.5CVSS5.8AI score0.00598EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/07/27 3:23 a.m.18 views

librenswan: IKEv2 Denial of Service via malformed fragmentation

A flaw was found in Libreswan's IKEv2 fragment reassembly mechanism. When a VPN gateway processes incoming split network packets fragments containing unexpected data, an off-by-one boundary validation error triggers an internal program safety check assertion failure. A remote, unauthenticated...

7.5CVSS5.8AI score0.00598EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/07/27 2:27 a.m.12 views

dovecot: Dovecot: Denial of Service via excessive IMAP bracing

A flaw was found in Dovecot. A remote attacker can exploit this vulnerability by sending excessive open braces over the Internet Message Access Protocol IMAP, leading to uncontrolled memory usage. This can cause the affected system to consume memory up to its configured limit, resulting in a Deni...

7.5CVSS7AI score0.00621EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/27 2:14 a.m.14 views

dovecot: Dovecot: Denial of Service via excessive IMAP bracing

A flaw was found in Dovecot. A remote attacker can exploit this vulnerability by sending excessive open braces over the Internet Message Access Protocol IMAP, leading to uncontrolled memory usage. This can cause the affected system to consume memory up to its configured limit, resulting in a Deni...

7.5CVSS7AI score0.00621EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/27 12:0 a.m.10 views

PT-2026-65195

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versio...

9.8CVSS5.5AI score0.0057EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/07/27 12:0 a.m.9 views

PT-2026-65268

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote attacker may be able to bypass network filters...

5.9AI score0.00392EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/27 12:0 a.m.10 views

PT-2026-65294

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 Description An...

9.8CVSS5.9AI score0.00432EPSS
SaveExploits0References9
Rows per page
Query Builder