61162 matches found
CVE-2026-105400
A flaw in ImageMagick before version 7.1.2-31 allows a resource leak vulnerability. By submitting a specially crafted magick script , an attacker can cause the application to fail to properly close open file handles. Repeated execution of such a script can exhaust available system file descriptor...
EUVD-2026-95004
ImageMagick before 7.1.2-31 contains a resource leak vulnerability that allows attackers to leave file pointers open by supplying a crafted magick script. Attackers can process malicious magick scripts to leak file descriptors, potentially exhausting resources and causing denial of service...
CVE-2026-105400
...
CVE-2026-105400
Removed by vendor...
CVE-2026-16169
IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
EUVD-2026-94893
IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
CVE-2026-16169
The IBM DataPower Gateway versions 11.0.0.0 through 11.0.0.2 are susceptible to a denial of service (DoS) condition. The root cause is uncontrolled resource consumption (CWE-400), which allows a remote attacker to impact the availability of the service. IBM addresses this vulnerability in release...
CVE-2026-16169 IBM DataPower Gateway Denial of Service
IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
SUSE-SU-2026:24121-1 Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection bsc1277725. - CVE-2026-91990: splitting of multipart da...
Satel Netco Design
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts in a user's browser, consume excessive system resources, enumerate files, create or modify files, and potentially execute arbitrary code. 2. RECOMMENDED PRACTICES CISA...
CVE-2026-106215
An uninitialized resource flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/561066220...
CVE-2026-106376
An uninitialized resource flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553881031...
CVE-2026-106258
An uninitialized resource flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553857574...
CVE-2026-106245
An uninitialized resource flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/550302121...
CLEANSTART-2026-PL91023 Uncontrolled Resource Consumption vulnerability in Apache Commons IO
Security vulnerability affects the apache-hive package. Uncontrolled Resource Consumption vulnerability in Apache Commons IO...
CLEANSTART-2026-PT37240 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources
CVE-2026-32283 affects multiple packages. If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. See references for individual vulnerability details...
CLEANSTART-2026-OK35462 Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D lan...
Security vulnerability affects the spark-sc213-jdk17-py312 package. Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings...
CLEANSTART-2026-RE29915 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)
Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...