CVE-2026-104183

A flaw was found in stream-json. When parsing JSON data, the Assembler component directly assigns properties, allowing an input key named 'proto' to replace a parsed object's internal prototype rather than creating a standard property. An attacker who supplies crafted input can exploit this...

Hipcam-RTSP-Format-Validation-Vulnerability

Hipcam RealServer/V1.0 RTSP 形式検証の脆弱性の概念実証 | CVE-2023-50685 Hipcam RealServer/V1.0 の RTSP サービスにおける形式検証の脆弱性の概念実証（PoC）。 説明 この PoC は、Hipcam RealServer/V1.0 の RTSP（Real Time Streaming Protocol）サービスにおける形式検証の脆弱性を悪用するものです。この脆弱性は、RTSP SETUP リクエスト内の 'clientport' パラメータに対する不十分な入力検証と処理に起因します。 脆弱性の詳細 RTSP SETU...

CVE-2026-100891

A flaw was found in OpenDMARC. An encoding error in the Internationalized Domain Name IDN handler within the opendmarcpolicyquerydmarc function can cause domain name queries to fail or process incorrectly. A remote attacker could exploit this vulnerability by submitting specially crafted domain...

CVE-2026-47834

A flaw was found in Spring Data JPA. This vulnerability allows a remote attacker to bypass data validation mechanisms by submitting specially crafted input. This could lead to unauthorized access to limited information and minor disruptions in service availability. Mitigation There is no mitigati...

CVE-2026-44642 Piwigo: SQL injection in upgrade authentication allows unauthenticated upgrade authorization bypass (PHP 8+)

Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, checkupgradeaccessrights in admin/include/functionsupgrade.php conditionally escapes the submitted username only when the removed getmagicquotesgpc function exists, so PHP 8 and later concatenate an...

Allocation of Resources Without Limits or Throttling

Overview org.apache.qpid:qpid-broker-plugins-amqp-0-10-protocol is a maven plugin for AMQP 0-10 protocol broker. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via improper handling of type size and count in the AMQP 0-10 decoder. An...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the processing of WS-Policy documents containing excessive content within policy assertions. An attacker can cause memory exhaustion by submitting specially crafted documents...

PT-2026-96169

Name of the Vulnerable Software and Affected Versions deepstream version 10.1.0 Description An issue exists where the src/services/permission/valve/rules-map.ts file omits RECORD ACTION.PATCH MULTI from the RULES MAP. When an authenticated user performs a PATCH MULTI record operation while the...

Missing Release of Memory after Effective Lifetime

Overview org.apache.karaf:org.apache.karaf.util is a modern and polymorphic applications container. It's a lightweight, powered, and enterprise ready container powered by OSGi Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime due to improper...

CVE-2026-47890

A flaw was found in Spring Framework, affecting its MVC and WebFlux applications. When these applications use Server-Sent Events SSE with view fragments, a vulnerability allows for stream corruption. This can lead to unreliable data delivery and potential disruption of services. Mitigation Disabl...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the H2Connection process. An attacker can exhaust heap memory and cause service disruption by sending HTTP/2 HEADERS or PUSHPROMISE frames without ENDHEADERS, followed by unbounded...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the H2Connection process. An attacker can exhaust heap memory and cause service disruption by sending HTTP/2 HEADERS or PUSHPROMISE frames without ENDHEADERS, followed by unbounded...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the H2Connection process. An attacker can exhaust heap memory and cause service disruption by sending HTTP/2 HEADERS or PUSHPROMISE frames without ENDHEADERS, followed by unbounded...

CVE-2026-76696 Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting networ...

CVE-2026-76696

HPE Networking EdgeConnect SD-WAN Gateways contain a vulnerability that allows an unauthenticated adjacent attacker to perform a denial-of-service attack. Successful exploitation can crash the system , preventing it from rebooting without manual intervention , thereby disrupting network operation...

CVE-2026-76686 Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways

A vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an unauthenticated remote attacker to conduct a denial-of-service attack on the affected service...

CVE-2026-76686

A denial-of-service vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways . An unauthenticated remote attacker can exploit it to disrupt the affected service, with a CVSS 3.1 score of 7.5 (HIGH) reflecting network vector, low complexity, no privileg...

CVE-2026-76686 Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways

A vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an unauthenticated remote attacker to conduct a denial-of-service attack on the affected service...

CVE-2026-21588

This High severity DoS Denial of Service vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to cause a...

CVE-2026-21588

This High severity DoS Denial of Service vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to cause a...