63791 matches found
CVE-2026-77791: Uncontrolled Resource Consumption
Uncontrolled Resource Consumption vulnerability in Apache Tomcat during sending of WebSocket close message enabled a DoS attack. This issue affects Apache Tomcat: from 11.0.0-M5 through 11.0.25, from 10.1.8 through 10.1.59, from 9.0.74 through 9.0.121. The following versions were EOL at the time...
CVE-2026-78383: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling vulnerability in Apache Tomcat allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1...
CVE-2026-77791: Uncontrolled Resource Consumption
Uncontrolled Resource Consumption vulnerability in Apache Tomcat during sending of WebSocket close message enabled a DoS attack. This issue affects Apache Tomcat: from 11.0.0-M5 through 11.0.25, from 10.1.8 through 10.1.59, from 9.0.74 through 9.0.121. The following versions were EOL at the time...
CVE-2026-86608: Uncontrolled Resource Consumption
The WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one of its REST routes, nor does it bound what that route stores, allowing unauthenticated users to write unlimited data into any user's metadata and to permanently prevent that account, including an...
CVE-2026-91776: Uncontrolled Resource Consumption
TypeDeserializerBase.findDeserializer in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for example @JsonTypeInfouse = Id.NAME, defaultImpl = ..., every distinct unrecognized type ID...
Linux Distros Unpatched Vulnerability : CVE-2026-95293
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in GPU. CVE-2026-95293 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable,...
CVE-2026-61814: Uncontrolled Resource Consumption
Jawn is an open source JSON parser. Prior to 1.7.0, Jawn's AsyncParser can perform quadratic work when a single JSON token is delivered across many small chunks because each absorb call rescans the incomplete token from the start. A remote attacker who controls untrusted JSON input and its chunk...
Linux Distros Unpatched Vulnerability : CVE-2026-95366
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of released resource in Core. CVE-2026-95366 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable...
Linux Distros Unpatched Vulnerability : CVE-2026-91740
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium...
CVE-2026-67238: Uncontrolled Resource Consumption
RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, rabbitpidcodec:decomposefrombinary/1 parses a caller-supplied ETF-encoded binary and calls binarytoatomNode, utf8 on the node-name field. It is reached from rabbitvolatilequeue:pidfromname/2, which is invoked for any...
Cisco Secure Email Resource Control DoS
The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to insufficient resource control during their existence. Exploiting these vulnerabilities can allow attackers who operate remotely to cause service failures...
NVIDIA Display Driver DoS
The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to insufficient resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...
Cisco Secure Firewall Threat Defense DTLS DoS
The vulnerability of the DTLS protocol implemented by Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow a malicious...
RHEL 8 : java-1.8.0-ibm (RHSA-2026:70630)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70630 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. Security Fixes: OpenJDK: Improve...
CVE-2026-91777: Uncontrolled Resource Consumption
Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference and the equivalent...
CVE-2026-91777: Uncontrolled Resource Consumption
Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference and the equivalent...
SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2026:4285-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4285-1 advisory. - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430...
CVE-2026-18170
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to cause a denial of service due to allocation of resources without limits or throttling...
CVE-2026-94624
A flaw was found in vLLM. A remote attacker can exploit a denial of service vulnerability in the P2P KV offloading mechanism. By supplying arbitrary remote host and port values, an attacker can create unreachable peer sessions that consume ZeroMQ sockets. This resource exhaustion leads to an...