ROS-20260605-73-0044

The vulnerability in Tomcat10 is related to unlimited resource allocation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the handle_scp_info() function, a tool for creating and managing NR/LTE Open5GS mobile networks, allows a attacker to cause a service failure.

The vulnerability of the handlescpinfo function, a tool for creating and managing NR/LTE Open5GS mobile networks, is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the distribution of resources without any restrictions or regulations, allows a violator to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

EUVD-2026-31819

The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used 4500/UDP. As a result, a specially crafted or malformed packet can cause the VPN processing service to terminate unexpectedly, leading to denial of service temporary interruption of VPN...

The vulnerability of the minimatch library on the Node.js software platform lies in the use of a regular expression with inefficient computational complexity, which allows attackers to trigger a service failure.

The vulnerability of the minimatch library on the Node.js software platform is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the built-in macro $__timeGroup in the Grafana monitoring and observation platform allows a hacker to trigger a service failure.

The vulnerability of the $timeGroup macro built into the Grafana monitoring and observation platform involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the DCP-ETSI protocol analyzer, a traffic analyzer for computer networks developed by Wireshark, allows attackers to cause service interruptions.

The vulnerability of the DCP-ETSI protocol analyzer, which is part of the Wireshark network traffic analyzer, is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the RTSP protocol analyzer and the traffic analysis tool for computer networks by Wireshark allows attackers to cause service interruptions.

The vulnerability of the RTSP protocol analyzer and the network traffic analyzer in Wireshark is related to pointer manipulation. Exploiting this vulnerability can allow a hacker to cause a service failure...

The vulnerability of the authenticate component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the authenc component in the Linux operating system’s kernel is related to incorrect checking of the amount of data at input. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the GNW protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the GNW protocol analyzer, a component of the Wireshark computer network traffic analyzer, lies in the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

BIT-JAVA-MIN-2023-22036

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE component: Utility. Supported versions that are affected are Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle GraalVM...

The vulnerability of the dcerpc parser in the Suricata intrusion detection and prevention system allows a intruder to trigger a service failure.

The vulnerability of the dcerpc parser in the Suricata intrusion detection and prevention system is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service interruptions...

The vulnerability in the Firefox web browser and the Thunderbird email client relates to the use of an uninitialized resource, allowing a hacker to trigger a service failure.

The vulnerability in the Firefox web browser and the Thunderbird email client relates to the use of an uninitialized resource. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability in the Firefox web browser and the Thunderbird email client relates to the use of memory after it is freed, allowing an attacker to trigger a service failure.

The vulnerability in the Firefox web browser and the Thunderbird email client relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Hanwha Vision QND-8080R 输入验证错误漏洞

Hanwha Vision QND-8080R is a network infrared surveillance camera device produced by Hanwha Vision in South Korea. The Hanwha Vision QND-8080R has a vulnerability related to input validation errors. This vulnerability arises from improper handling of data in specific requests, which may lead to...

The vulnerability of the .NET software platform, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the .NET software platform is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the TextEncoding component in Google Chrome and Microsoft Edge browsers allows a perpetrator to trigger a service failure.

The vulnerability of the TextEncoding component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service interruptions through a specially crafted HTML page...

The vulnerability in the implementation of WebRTC technology in Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.

The vulnerability of WebRTC implementations in Google Chrome and Microsoft Edge is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

The vulnerability of Google Chrome and Microsoft Edge web browsers allows a perpetrator to trigger a service failure.

The vulnerability of Google Chrome and Microsoft Edge browser services relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx, related to unlimited resource allocation, allows a attacker to cause a service failure.

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx is related to unlimited resource allocation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...