60550 matches found
CVE-2026-93294
The Azure Monitor data source contains a vulnerability where a user with query access can leverage its resource proxy as an unintended proxy. This allows the user to call Azure Resource Manager APIs beyond the scope required by Grafana , performing actions using the data source's Azure identity ....
CVE-2026-95502
Grafana's Git Sync (provisioning) is vulnerable to memory exhaustion due to uncontrolled resource consumption. A malicious Git server can trigger this by returning oversized or highly compressed responses . Exploitation requires an administrator to have configured Git Sync to communicate with the...
CVE-2026-77459 Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used during ordinary synchronization. The omitt...
CVE-2026-77459 Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used during ordinary synchronization. The omitt...
CVE-2026-77459
Argo CD (versions 2.10.0 through 3.3.15 , 3.4.10 , 3.5.4 , and 3.6.0-rc2 ) contains a vulnerability where PreDelete and PostDelete resource hooks bypass AppProject destination and resource authorization checks. While standard synchronization checks for namespaces, servers, and allow/deny lists ar...
CVE-2022-41404-DoS-Protection
CVE-2022-41404-DoS-Protection Windows Apache Tomcat resource limits implementation guide for CVE-2022-41404 DoS vulnerability protection...
CVE-2026-90242
A flaw was found in the Linux kernel's iommu/vt-d subsystem. When an IOMMU Input/Output Memory Management Unit domain with an iopfhandler is replaced by another domain at the Requestor ID RID level, a reference count for the old domain is not properly released. This resource leak prevents the...
CVE-2026-90163
A flaw was found in the Linux kernel's ksmbd SMB server component. When the ksmbd module fails to initialize, certain resources, such as the proc tree and per-CPU counters, are not properly deallocated. This resource leak can be exploited by a local user, potentially leading to a Denial of Servic...
CVE-2026-90152
A flaw was found in the smb/server component of the Linux kernel. A session leak in the ksmbdsessionregister function occurs when a session fails to be stored, leading to its reference count not being properly decremented. This can result in resource exhaustion, potentially allowing a remote...
CVE-2026-90146
A flaw was found in the Linux kernel. The bpfxdplinkupdate function bypasses necessary checks when updating an eXpress Data Path XDP program. A local user can first create an XDP link with a standard program and then use BPFLINKUPDATE to replace it with an offloaded or device-bound program. This...
CVE-2026-97334
The Commvault software is vulnerable to a denial of service due to the network messaging layer's improper handling of highly compressed data (CWE-409). This flaw can lead to a resource exhaustion that affects service availability. Affected components include the CommServe server, Web Server, Comm...
CVE-2026-109947
FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to exhaust client memory via oversized drive redirection read requests. Attackers can send IRPMJREAD with Length 0xffffffff, causing roughly 4 GiB of zeroed allocation on...
ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
Microsoft OpenSSH for Windows Denial of Service Vulnerability
Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network...
Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability
Use of uninitialized resource in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...
Microsoft SQL Server Denial of Service Vulnerability
Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network...
Windows Netlogon Denial of Service Vulnerability
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network...
Windows Kernel-Mode Drivers Information Disclosure Vulnerability
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...