61870 matches found
Fedora 43 : perl-HTML-FormFu (2026-219b6aef6c)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-219b6aef6c advisory. HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. In this...
ROS-20260929-73-0146
The vulnerability of the ioopenatprep function in the iouring/openclose.c module, a component of the Linux kernel’s asynchronous input/output interface, relates to the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow an attacker to cause...
CVE-2026-102311: Use of Uninitialized Resource
Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
ROS-20260929-73-0011
The vulnerability of the drm/tegra component in the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability allows a perpetrator to cause service failures...
PT-2026-108469
Security vulnerability affects the sonarqube package. Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core 5...
CVE-2026-100242: Dependency on Vulnerable Third-Party Component
Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Excessive Allocation. This issue affects Mediawiki - DataTransfer Extension: from 1.46.0 before 1.47.0...
CVE-2026-95324: Use of Uninitialized Resource
Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-102307: Use of Uninitialized Resource
Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
ROS-20260929-73-0135
The vulnerability of the f2fszerorange function in the Linux operating system is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a perpetrator to cause a service failure...
ROS-20260929-73-0177
The vulnerability of the fibtableFlush function in the net/ipv4/fibtrie.c module of the Linux kernel allows an attacker to cause a service failure by failing to release resources after their useful life has ended. Exploiting this vulnerability can enable an attacker to trigger a service failure...
ROS-20260929-73-0028
The vulnerability of the ext4prepareInlinedata function in the fs/ext4/inline.c file of the Ext4 file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260929-73-0155
The vulnerability of the hclgevfknicsetup function in the drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevfmain.c file of the Linux kernel’s Ethernet network adapter driver is related to the lack of resource initialization. Exploiting this vulnerability could allow an attacker to cause a system...
CVE-2026-102414: Uncontrolled Resource Consumption
pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its JavaScript fallback lib/sync.js. A password longer than the block size 64 bytes, or 128 bytes for sha384 and sha512 is passed to HMAC as the key on every iteration, and HMAC hashes such keys in...
PT-2026-102833
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description An uninitialized resource in WebGPU allows a remote attacker to obtain cross-origin data by using a crafted HTML page. WebGPU is a modern API that provides high-performance graphics and...
ROS-20260929-73-0101
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-109051
Issue summary: A malicious remote peer may flood the local QUIC stack with NEW CONNECTION ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRE CONN ID frame for every NEW CONNECTION ID frame it receives...
CVE-2026-102303: Use of Uninitialized Resource
Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
Deep Learning Latency Attacks and Defenses: A Cross-Domain Survey of Availability Threats
Adversarial machine learning has focused mainly on integrity, but availability is an increasingly consequential complement. Latency attacks also energy-latency attacks increase inference-time work, energy, or response time, causing deadline misses, throughput collapse, or resource exhaustion in...
ROS-20260929-73-0099
The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...