ROS-20260923-73-0046

The vulnerability of the nfsd4ffprocgetdeviceinfo function in the fs/nfsd/flexfilelayout.c module, which is part of the NFS network file system support in Linux kernels, stems from the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause servi...

ROS-20260923-73-0059

The vulnerability of the unregisternvdimmpmu function in the drivers/nvdimm/ndperf.c module of the Linux operating system’s memory device drivers related to the distribution of resources without restrictions and regulation. Exploiting this vulnerability could allow an attacker to compromise the...

SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2026:4285-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4285-1 advisory. - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430...

Linux Distros Unpatched Vulnerability : CVE-2026-91740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium...

RHEL 8 : java-1.8.0-ibm (RHSA-2026:70630)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70630 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. Security Fixes: OpenJDK: Improve...

CVE-2026-18170

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to cause a denial of service due to allocation of resources without limits or throttling...

CVE-2026-94624

A flaw was found in vLLM. A remote attacker can exploit a denial of service vulnerability in the P2P KV offloading mechanism. By supplying arbitrary remote host and port values, an attacker can create unreachable peer sessions that consume ZeroMQ sockets. This resource exhaustion leads to an...

CVE-2026-17472

IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or modify unauthorized resources due to the use of wildcards in RBAC permission definitions...

CVE-2026-94625

A flaw was found in vLLM. A remote attacker can exploit this vulnerability by sending rejected prefill requests to the MooncakeConnector. This action creates ownerless transfer placeholders that are not properly reclaimed, leading to resource exhaustion. Consequently, legitimate requests may...

CVE-2026-18170 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to cause a denial of service due to allocation of resources without limits or throttling...

CVE-2026-18170

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that could allow a remote attacker to cause a denial of service . The root cause is the allocation of resources without limits or throttling . No specific exploit details or remediation instructions are pr...

CVE-2026-18170 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to cause a denial of service due to allocation of resources without limits or throttling...

CVE-2025-12767 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to cause a denial of service using a specially crafted regular expression that would cause excessive resource consumption...

CVE-2025-12767

IBM Concert versions 1.0.0 through 3.0.0 are vulnerable to a denial of service condition. A remote attacker can exploit this by providing a specially crafted regular expression that triggers excessive resource consumption . No specific remediation steps or exploit details are provided in the docu...

EUVD-2026-83415

Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation...

GHSA-HXP9-W8X3-P566 Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation

Summary Autobahn Python enforces maxMessagePayloadSize against the compressed WebSocket frame length before permessage-deflate inflation, then delivers the inflated message to application callbacks without a second size check. A client frame that is only 22 compressed bytes can inflate to 4096...

Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation

Summary Autobahn Python enforces maxMessagePayloadSize against the compressed WebSocket frame length before permessage-deflate inflation, then delivers the inflated message to application callbacks without a second size check. A client frame that is only 22 compressed bytes can inflate to 4096...

missinglinkai-resource-manager-docker (>=1.0.367, <=2.14.1737), pyne-xmas-elves (>=0.1.0, <=0.7.1) +2 more potentially affected by CVE-2026-77528 via autobahn (17.10.1)

autobahn PYPI version 17.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - missinglinkai-resource-manager-docker =1.0.367, =0.1.0, =0.7.2, =0.7.7, =0.10.1 Source cves: CVE-2026-77528 Source advisory:...

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses

A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak p...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...