ROS-20261009-73-0244

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0274

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0342

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

Golang net/http DoS

The vulnerability of the net/http component in the Golang programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Go Yaml File Processing Heap Buffer Overflow DoS

The vulnerability of the Go Yaml file processing library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Apache Tomcat Resource Consumption DoS

The vulnerability of the Apache Tomcat application server is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Apache Tomcat Resource Consumption DoS

The vulnerability of the Apache Tomcat application server is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-107885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs. The scheduler suppresses...

Cisco Application Policy Infrastructure Controller Resource Management Data Compromise

The vulnerability of the Cisco Application Policy Infrastructure Controller APIC management tool is related to insufficient control over resources during its existence. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of t...

PT-2026-109199

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-107885: Allocation of Resources Without Limits or Throttling

OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs. The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that...

PT-2026-109207

Allocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-105400

A flaw was found in ImageMagick. This vulnerability allows an attacker to cause a Denial of Service DoS by submitting a specially crafted magick script. When processing the malicious script, the application fails to properly close open file handles, leading to a resource leak. Repeated execution...

CVE-2026-106273

An uninitialized resource flaw was found in the Video component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553118338...

CVE-2026-106202

An uninitialized resource flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553117809...

Security Bulletin: IBM Fusion Data Foundation is vulnerable to Denial of Service.

Summary brace-expansion is used by IBM Fusion Data Foundation, which could cause a Denial of Service. CVE-2026-45149. Vulnerability Details CVEID:CVE-2026-45149 DESCRIPTION: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. From 5.0.0 to before 5.0.6,...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Enterprise Webapps

Summary Multiple vulnerabilities were addressed in IBM Aspera Enterprise Webapps version 1.0.7 Vulnerability Details CVEID:CVE-2026-75095 DESCRIPTION: IBM Aspera Enterprise WebApps could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. CWE:CWE-400:...

CVE-2026-106231

An uninitialized resource flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553115993...

CVE-2026-97147

A flaw was found in OpenStack Mistral. Due to a missing authorization check in the action definition and environment update paths, an authenticated user can modify or overwrite another project's publicly-scoped action definitions and environments. An attacker with a valid account in any project c...

CVE-2026-78399

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources...