63517 matches found
Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilities
Summary Multiple vulnerabilities are found in dependent open source libraries used in IBM Quantum Safe Explorer code base. IBM Quantum Safe Explorer has addressed these vulnerabilities by updating the versions of the affected libraries. Vulnerability Details CVEID:CVE-2026-64607 DESCRIPTION:...
Security Bulletin: IBM Engineering Systems Design Rhapsody is vulnerable with Jackson Databind library
Summary Multiple vulnerabilities related to Jackson Databind library were addressed for IBM Engineering Systems Design Rhapsody. Vulnerability Details CVEID:CVE-2026-68497 DESCRIPTION: jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar...
Uncontrolled Resource Consumption
jackson-databind is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to the deserialization of arbitrarily long numeric components in XML datatype strings without length validation, which allows an unauthenticated attacker to submit specially crafted JSON values that caus...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages
A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...
EUVD-2026-88048
A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource...
ROS-20260928-73-0080
The vulnerability of the recvpkt function in the net/bluetooth/6lowpan.c module of the Linux Bluetooth subsystem is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...
ruby security update
3.3.12-15 - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252031...
CVE-2026-101098: Uncontrolled Resource Consumption
A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the component HTTP Handler. Such manipulation leads to resource consumption. The attack can be launched remotely. The pu...
PT-2026-99788
Name of the Vulnerable Software and Affected Versions Apache Roller version 6.1.5 Description An authorization bypass exists that allows an authenticated user with authoring rights on one weblog to read, modify, or delete resources belonging to another weblog. This occurs through unscoped...
PT-2026-99934
Name of the Vulnerable Software and Affected Versions ag-ui-protocol ag-ui versions prior to 2026-09-23 Description A remote issue exists in the HTTP Handler component within the readAllBytes function of the JdkAgentHttpHandler.java file. Manipulation of this function can lead to excessive resour...
ROS-20260928-73-0023
The vulnerability of the usbnetresumerx function in the drivers/net/usb/usbnet.c module of the Linux kernel is related to resource management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-116249
Уязвимость функции winpr aligned malloc RDP-клиента FreeRDP связана с использованием неинициализированного ресурса. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании...
Netty SslClientHelloHandler Buffer Overflow DoS
The vulnerability of the SslClientHelloHandler.decode function in the framework for developing network applications, servers, and clients using the Netty protocol is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Netty Resource Limit DoS
The vulnerability of the framework for developing network applications, servers, and client protocols using Netty is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
pyasn1 Uncontrolled Resource Consumption DoS
The vulnerability of the pyasn1 library in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
pyasn1 Uncontrolled Resource Consumption DoS
The vulnerability of the pyasn1 library in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Netty Resource Limit DoS
The vulnerability of the framework for developing network applications, servers, and client protocols using Netty is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
RedisArrayAggregator DoS
The vulnerability of the RedisArrayAggregator component in the networking application development framework, used for servers and client protocols based on Netty, involves an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruption...
Netty DefaultHttp2Connection DefaultEndpoint DoS
The vulnerability of the DefaultHttp2Connection.DefaultEndpoint component in the framework for developing network applications, servers, and client protocols using Netty is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service...