EUVD-2025-211132

A NULL pointer dereference in the avprivh264hasnumreorderframes function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service DoS via processing a crafted media file...

CVE-2025-52290

A NULL pointer dereference in the avprivh264hasnumreorderframes function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service DoS via processing a crafted media file...

PT-2026-117558

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

RHEL 10 : hostapd (RHSA-2026:85276)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:85276 advisory. hostapd is a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE...

PT-2026-117559

Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-117555

Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...

Linux Distros Unpatched Vulnerability : CVE-2026-96236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. CVE-2026-96236 Note that...

TencentOS Server 4: openssl (TSSA-2026:1178)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1178 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

PT-2026-117553

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-117557

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

Linux Distros Unpatched Vulnerability : CVE-2026-92707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MessagePack for C is a MessagePack serializer for C. Prior to 2.5.303 and 3.1.9, deserializing attacker- controlled MessagePack data as System.Object through...

CVE-2026-12148: Deserialization of Untrusted Data

IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes for Java...

CVE-2026-112283: Memory Allocation with Excessive Size Value

VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in parseextentstartpoints in clpiparse.c that trusts the numpoint field without bounds checking. Attackers can supply a crafted .clpi file on a disc, image, or directory with a huge numpoint to exhaust memor...

Linux Distros Unpatched Vulnerability : CVE-2026-96233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. CVE-2026-96233 Note that Nessus relies on the presence of th...

PT-2026-117540

Name of the Vulnerable Software and Affected Versions markdown-it versions prior to 14.3.2 markdown-it versions prior to 15.0.2 Description When the typographer option is set to true, specially crafted Markdown input can trigger quadratic processing time within the smartquotes rule. This occurs...

CVE-2026-112309: Improperly Controlled Modification of Object Prototype Attributes

@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared built-in functions via inherited Object.prototype methods. Attackers can submit a form field named hasOwnProperty.call through @rvf/core form...

RHEL 10 : wireshark (RHSA-2026:84721)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84721 advisory. The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security...

PT-2026-117677

Name of the Vulnerable Software and Affected Versions Pillow versions 5.1.0 through 12.9.9 Description Pillow can exhaust system resources when parsing an existing PDF during an append operation. The PdfParser follows page-tree child references without tracking cycles or duplications and follows...

Red Hat: CVE-2026-112895: pillow: pillow: Denial of service via crafted PDF during append operations

Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF during an append operation. PdfParser follows page-tree child references without cycle or duplication tracking and follows previous-trailer chains with only an exact...

Red Hat: CVE-2026-112901: pillow: Pillow: Denial of Service via crafted XBM image header

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile.open, when an application calls Image.open on a small crafted XBM file, XbmImagePlugin applies a backtracking expression to the attacker-controlle...