638380 matches found
The vulnerability of the gfs2 component in the Linux operating system’s kernel, which allows a hacker to cause a service failure
The vulnerability of the gfs2 component in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
Important: containerd
Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Nitro-enclaves Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and thi...
The vulnerability of EFI/CPER components in Linux kernel allows a hacker to trigger a service failure.
The vulnerability of EFI/CPER components in Linux kernel is related to errors in processing parameter length. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-76736
sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, group comments in sqlparse/engine/grouping.py repeatedly rescans comment-only statements before the MAX GROUPING TOKENS guard, causing quadratic CPU consumption through sqlparse.parse and sqlparse.formatsql, strip...
The vulnerability of the nft_set_rbtree.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the nftsetrbtree.c component in the Linux operating system is related to incorrect checks for consistency in input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099519)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099519 advisory. Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AFUNIX socket to achieve sustained denial of service...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099535)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099535 advisory. Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in...
FreeBSD : PostgreSQL -- Multiple vulnerabilities (05d311bc-9991-11f1-bc50-6cc21735f730)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 05d311bc-9991-11f1-bc50-6cc21735f730 advisory. The PostgreSQL project reports: CVE-2026-6464: psql COPY FROM STDIN, if the copy fails before...
.NET: .NET Denial of Service Vulnerability
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...
LightRAG <= 1.5.4 - Missing Authentication
LightRAG through version 1.5.4 contains a broken access control vulnerability caused by the API server binding to all network interfaces with authentication disabled, letting unauthenticated network attackers fully control indexed documents and resources, exploit requires network access. id:...
MINI-GJC6-X9Q5-HGR5
Bulletin has no description...
MINI-5H98-6632-32P2
Bulletin has no description...
MINI-Q4C3-FFQV-PX2F
Bulletin has no description...
MINI-97HQ-JQCX-5WPP
Bulletin has no description...
MINI-MCRF-QMXP-VRH6
Bulletin has no description...
CVE-2026-74797
OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init command when processing maliciously-crafted .zip archives for provider or module packages. Attackers can cause excessive CPU usage by controlling .zip archive content served during dependency installation,...
CVE-2026-74792
Scriban before 7.0.0 affected versions = 6.6.0 contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a path ParseArrayInitializer → ParseExpression → ParseArrayInitializer that is not covered by the ExpressionDepthLimit count...
CVE-2026-74795
Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does not enforce a default expression depth limit the ExpressionDepthLimit property in ParserOptions defaults to null/disabled, so an attacker who controls template input can supply a...
CVE-2026-74785
Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression evaluation that bypass existing safety controls through unbounded string multiplication, uncontrolled BigInteger shift operations, and LoopLimit bypass via range enumeration in builtin functions. Attacker...
CVE-2026-74789
Scriban before 7.0.0 affected = 6.6.0 applies its LoopLimit constraint only to script loop statements and not to expensive iteration performed inside built-in operators and functions. As a result, a single expression such as 1..1000000 | array.size — or a memory-amplification expression such as '...