CVE-2023-54390 PocketMine-MP before 5.3.1 Denial of Service via LoginPacket

PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper null value handling in arrays. Attackers can send malformed JSON with unexpected null elements in LoginPacket to crash the server...

CVE-2023-54355 PocketMine-MP 5.2.0 Server Crash via Incorrect EC Curve

PocketMine-MP versions before 5.3.1 and 4.23.1 fail to validate that the identityPublicKey in LoginPacket uses the required secp384r1 elliptic curve. Attackers can provide LoginPackets with keys using different curves or non-EC key types to pass login verification but trigger an uncaught exceptio...

CVE-2023-54390 PocketMine-MP before 5.3.1 Denial of Service via LoginPacket

PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper null value handling in arrays. Attackers can send malformed JSON with unexpected null elements in LoginPacket to crash the server...

CVE-2023-54390

PocketMine-MP versions before 5.3.1 and 4.23.1 are vulnerable to a denial of service caused by improper null value handling in arrays during LoginPacket JSON parsing. An unauthenticated, remote attacker can send malformed JSON containing unexpected null elements in the LoginPacket to crash the se...

CVE-2023-54390 PocketMine-MP before 5.3.1 Denial of Service via LoginPacket

PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper null value handling in arrays. Attackers can send malformed JSON with unexpected null elements in LoginPacket to crash the server...

SUSE-SU-2026:4106-1 Security update for golang-github-vpenso-prometheus_slurm_exporter

This update for golang-github-vpenso-prometheusslurmexporter fixes the following issue: - CVE-2022-21698: github.com/prometheus/clientgolang/prometheus/promhttp: Denial of service using InstrumentHandlerCounter bsc1248703. Changes for golang-github-vpenso-prometheusslurmexporter: - Update to...

CVE-2026-79969

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability. An unauthenticated attacker with remote access could potentially explo...

CVE-2026-79968

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial o...

CVE-2026-79962

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability. An unauthenticated attacker with remote access could potentially explo...

Regular Expression Denial of Service (ReDoS)

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the Actor.fromstring parsing in git/util.py. An attacker can exhaust CPU and stall commit metadata access by supplying a...

OPENSUSE-SU-2026:21818-1 Security update for libcupsfilters

This update for libcupsfilters fixes the following issues: - CVE-2026-64611: infinite-loop CPU-exhaustion DoS in cfIEEE1284NormalizeMakeModel on empty MDL field bsc1273145. - CVE-2026-64612: malformed PNG aborts CUPS image filter process bsc1273146...

gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write

A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length counter by fixed offsets 98 and 10 bytes without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 byte...

gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...

gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing

A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...

CVE-2026-79968

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial o...

CVE-2026-79968

Dell SCG 5.0 (Secure Connect Gateway) is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 . An unauthenticated attacker with remote network access could exploit this to cause denial...

CVE-2026-79968

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial o...

CVE-2026-79962

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability. An unauthenticated attacker with remote access could potentially explo...

EUVD-2026-75008

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability. An unauthenticated attacker with remote access could potentially explo...

CVE-2026-79962

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability. An unauthenticated attacker with remote access could potentially explo...