RedisArrayAggregator DoS

The vulnerability of the RedisArrayAggregator component in the networking application development framework, used for servers and client protocols based on Netty, involves an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruption...

Netty SslClientHelloHandler Buffer Overflow DoS

The vulnerability of the SslClientHelloHandler.decode function in the framework for developing network applications, servers, and clients using the Netty protocol is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Netty DelegatingDecompressorFrameListener Buffer Overflow DoS

The vulnerability of the DelegingDecompressorFrameListener class in the framework for developing network applications, servers, and clients using the Netty protocol is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service...

MinIO DoS

The vulnerability of the MinIO object storage server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Netty decodeLength Method DoS

The vulnerability of the decodeLength method in the framework for developing network applications, servers, and Netty protocol clients is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Netty Resource Limit DoS

The vulnerability of the framework for developing network applications, servers, and client protocols using Netty is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Netty Resource Limit DoS

The vulnerability of the framework for developing network applications, servers, and client protocols using Netty is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

ROS-20260928-73-0105

The vulnerability of the nfsd4read function in the fs/nfsd/nfs4proc.c module, which supports the Network File System in Linux kernels, is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

ROS-20260928-73-0121

The vulnerability of the ftracemoduleenable function in the kernel/trace/ftrace.c module, which supports kernel tracing in Linux operating systems, is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-100884

A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource...

CVE-2026-100884 Krayin laravel-crm attachment-download Endpoint acl.php resource injection

A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource...

CVE-2026-100884 Krayin laravel-crm attachment-download Endpoint acl.php resource injection

A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource...

CVE-2026-100884 Krayin laravel-crm attachment-download Endpoint acl.php resource injection

A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource...

CVE-2026-100884

A resource injection vulnerability exists in Krayin laravel-crm versions up to 2.2.5 within the attachment-download component. Specifically, the Storage::download function in packages/Webkul/Admin/src/Config/acl.php is susceptible to the manipulation of the ID argument, leading to improper contro...

CVE-2026-101062

Obot before v0.23.0 affected versions = v0.22.1 running with OBOTSERVERENABLEAUTHENTICATION=true exposes OAuth dynamic client registration without authentication and without any restriction on the redirect URIs a client may register. Because the authorization flow auto-completes for an already...

CVE-2026-100884: Improper Control of Resource Identifiers

A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource...

Allocation of Resources Without Limits or Throttling

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via excessive allocation in the allocation. An attacker can exhaust system...

Allocation of Resources Without Limits or Throttling

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via excessive allocation. An attacker can exhaust system resources by sending...

Allocation of Resources Without Limits or Throttling

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via excessive allocation. An attacker can exhaust system resources by sending...

Allocation of Resources Without Limits or Throttling

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via excessive allocation. An attacker can exhaust system resources by sending...