649099 matches found
CVE-2026-74248
A flaw was found in OpenStack Octavia. An authenticated user can exploit this vulnerability by associating a Quality of Service QoS policy from another project with an amphora. This mishandling of QoS policy authorization may prevent the deletion of the policy, leading to a denial of service DoS...
BIT-ELASTICSEARCH-2026-56143 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...
Security Bulletin: IBM Maximo Application Suite uses undici-7.28.0.tgz which is vulnerable to CVE-2026-13697.
Summary IBM Maximo Application Suite uses undici-7.28.0.tgz which is vulnerable to CVE-2026-13697. This bulletin contains information regarding the vulnerability and how it has been addressed. Vulnerability Details CVEID:CVE-2026-13697 DESCRIPTION: undici's cache interceptor mishandles malformed...
CVE-2026-86315
A flaw was found in Samsung Open Source Escargot. This out-of-bounds write vulnerability, caused by numeric truncation, allows an attacker to corrupt native memory. By supplying specially crafted JavaScript for execution, a remote attacker can trigger this flaw, leading to the host process crashi...
CVE-2026-86314
Integer overflow in the source-bounds check in Memory::init src/runtime/Memory.cpp in Samsung walrus on all platforms allows a remote attacker to cause an out-of-bounds heap read and denial of service via a crafted WebAssembly module in which a 32-bit unsigned addition wraps around and bypasses t...
CVE-2026-86314
Samsung Walrus (a WebAssembly runtime) is vulnerable to an integer overflow in the source-bounds check within Memory::init() (src/runtime/Memory.cpp). A crafted WebAssembly module can trigger a 32-bit unsigned addition that wraps around, bypassing the bounds check and causing an out-of-bounds hea...
CVE-2026-20504
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...
CVE-2026-20504
CVE-2026-20504 affects the MediaTek Modem component, where a missing bounds check can cause a system crash, leading to a remote denial of service . Exploitation requires a User Equipment (UE) to connect to a rogue base station controlled by the attacker, with no additional privileges or user inte...
EUVD-2026-72197
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...
CVE-2026-20503
CVE-2026-20503 affects the Modem component in MediaTek devices. A missing bounds check can cause a system crash, leading to remote denial of service when a user equipment (UE) connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are r...
EUVD-2026-72176
A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high...
PT-2026-86672
HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the number of characters which can impact system performance or availability...
PT-2026-86799
commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Attributes extension where AttributesListener::findTargetAndDirection performs quadratic-time sibling list scanning. Unauthenticated attackers can submit approximately 32 KB of repeated attribute blocks t...
PT-2026-86796
league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delimiter processing that perform super-linear work on crafted input. Attackers can submit specially crafted Markdown with long...
ROS-20260907-73-0527
The vulnerability in Java-21-openjdk is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260907-73-0528
The vulnerability in java-25-openjdk is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260907-73-0526
The vulnerability in Java-17-openJDK is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260907-73-0524
The vulnerability in Java 1.8.0-openjdk is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260907-73-0090
The vulnerability of the udev component of the Systemd service management subsystem is related to improper resource movement between different areas. Exploiting this vulnerability can allow an attacker to cause a service failure...