6597 matches found
CVE-2026-73198
FreeIPA is vulnerable to an unauthenticated denial-of-service via the /ipa/i18n_messages endpoint. A remote attacker can send an arbitrarily large request body, causing memory exhaustion and service degradation. The root cause is an unbounded request body read with no size limit enforced. CVSS 3....
PT-2026-79065
Name of the Vulnerable Software and Affected Versions Plate versions prior to 53.3.2 Description When converting attacker-controlled HTML through the htmlToDocxBlob function in a server-side or privileged environment, the @platejs/docx-io module fetches remote image URLs. This behavior allows for...
PT-2026-79162
Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A local attacker can cause a denial of service by triggering uncontrolled resource consumption. Recommendations At the moment, there is no information about a new...
PT-2026-79259
Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...
PT-2026-79245
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A local attacker can cause a denial of service by triggering uncontrolled resource consumption during the parsing of directory records. Recommendations At the moment, there ...
PT-2026-79040
Uncontrolled Resource Consumption vulnerability in Apache InLong. Non-template responsible persons can view template information. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick 1 to solve it. 1...
PT-2026-79041
Uncontrolled Resource Consumption vulnerability in Apache InLong. Users could affect operational configuration or allow upload of non-official packages. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick 1 to solve it. 1...
CVE-2026-69222
LiquidJS versions prior to 10.27.2 have a memory-limit accounting defect in the join and array_to_sentence_string filters: they bill complexity by element count rather than output string length, so a crafted template can allocate toward V8's memory limits and crash the process. Exploitation requi...
CVE-2026-69222 LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process
LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.2, the join filter in src/filters/array.ts computes complexity from array.length and separator length instead of the total string length produced by array.joinsep. The concat filter can cheaply doub...
CVE-2026-16836
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
CVE-2026-16836 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
CVE-2026-16836
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to denial of service via uncontrolled resource consumption; a remote attacker with no authentication can trigger full availability impact (CVSS 7.5 HIGH, AV:N/AC:L/PR:N/UI:N/A:H). Exploitation status is not provided in the documents; monitor the...
EUVD-2026-62723
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
CVE-2026-16831
IBM AIX 7.2 and 7.3, and PowerVM VIOS 4.1 are vulnerable to a network-exploitable denial-of-service via uncontrolled resource consumption (CVSS 7.5 HIGH, no auth required). No patch or exploitation details are provided; monitor the IBM support reference for updates.
EUVD-2026-62719
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
CVE-2026-16831 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
EUVD-2026-62715
Uncontrolled resource consumption in check.jst in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote unauthenticated attacker to cause denial of service via excessively large password values...
CVE-2026-19507
CVE-2026-19507 affects the RDK-B WebUI (version rdkb-2025q4-kirkstone.04.10.26), an open-source web-based management interface for broadband gateways. The login handler in /usr/www2/check.jst does not limit password length before computing a SHA-256 hash on the entire submitted value. A remote, u...
CVE-2026-19507 RDK WebUI uncontrolled resource consumption
Uncontrolled resource consumption in check.jst in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote unauthenticated attacker to cause denial of service via excessively large password values...