2271 matches found
CVE-2026-90584 TooTallNate Java-WebSocket Fragmentation Draft_6455.java processFrameContinuousAndNonFin allocation of resources
A weakness has been identified in TooTallNate Java-WebSocket up to 1.6.1. The impacted element is the function processFrameContinuousAndNonFin of the file Draft6455.java of the component Fragmentation Handler. Executing a manipulation can lead to allocation of resources. The attack may be perform...
CVE-2026-90584
TooTallNate Java-WebSocket versions up to 1.6.1 are affected by a resource allocation flaw in the Fragmentation Handler , specifically the processFrameContinuousAndNonFin function in Draft_6455.java. A remote attacker with no authentication can trigger the weakness, resulting in low availability ...
CVE-2026-90584: Allocation of Resources Without Limits or Throttling
A weakness has been identified in TooTallNate Java-WebSocket up to 1.6.1. The impacted element is the function processFrameContinuousAndNonFin of the file Draft6455.java of the component Fragmentation Handler. Executing a manipulation can lead to allocation of resources. The attack may be perform...
PT-2026-90968
A weakness has been identified in TooTallNate Java-WebSocket up to 1.6.1. The impacted element is the function processFrameContinuousAndNonFin of the file Draft 6455.java of the component Fragmentation Handler. Executing a manipulation can lead to allocation of resources. The attack may be...
Security Bulletin: Security Vulnerability identified in libthrift-0.23.0.jar used by IBM Maximo Application Suite - MREF ( CVE-2026-43871, CVE-2026-45112, CVE-2026-48586 )
Summary There is a vulnerability in libthrift-0.23.0.jar used by IBM Maximo Application Suite - MREF Vulnerability Details CVEID:CVE-2026-43871 DESCRIPTION: Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects...
CVE-2026-57099
A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized remote attacker to cause a Denial of Service DoS by allocating resources without limits or throttling. This can lead to the affected system becoming unresponsive or unavailable to legitimate users...
Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway Desktop Edition.
Summary Multiple vulnerabilities were identified in third-party components used by CICS Transaction Gateway Desktop Edition, including IBM WebSphere Application Server, IBM WebSphere Application Server Liberty, Apache Tomcat Embed, Logback Classic, Log4j API, and Jackson Databind. To address thes...
CVE-2026-72978
Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-69374
Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...
CVE-2026-57099
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
EUVD-2026-73886
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-57099
ASP.NET Core is affected by an unbounded resource allocation flaw (no limits or throttling) that allows an unauthenticated, remote attacker to cause a denial of service over the network. The flaw carries a CVSS 3.1 base score of 7.5 (HIGH) with low attack complexity and no required privileges. CI...
EUVD-2026-73481
Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...
CVE-2026-69374
CVE-2026-69374 is a denial-of-service vulnerability in Windows SMB Server caused by allocation of resources without limits or throttling . An authorized attacker (low privileges) can exploit this over the network to disrupt service, with high availability impact and no confidentiality or integrit...
EUVD-2026-73251
Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-72978
Active Directory Federation Services (AD FS) contains a resource allocation without limits or throttling flaw that allows an unauthorized, network-based attacker to deny service . The impact is limited to availability—no confidentiality or integrity compromise. NVD scores it 7.5 (HIGH) while Micr...
ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
Windows SMB Server Denial of Service Vulnerability
Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...
Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...