h2 library Resource Consumption DoS

The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

POC_CVE-2024-12537

CVE-2024-12537 Open WebUI Code Format DoS Lab This repository contains a local, isolated reproduction lab and nuclei template candidate for CVE-2024-12537, an unauthenticated denial-of-service vulnerability in Open WebUI's code formatting endpoint. The lab does not send large denial-of-service...

CVE-2026-78844

Summary javadelight delight-nashorn-sandbox 0.5.5 suffers from Uncontrolled Resource Consumption. The sandbox enforces maxCPUTime limits by statically injecting interruption checks into JavaScript loops, but the sandbox fails to disable dynamic code evaluation. An attacker can use these functions...

CVE-2026-36958

CVE-2026-36958: Denial of Service via Concurrent HTTP Requests CVE ID: CVE-2026-36958 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: U-SPEED Product: U-SPEED Router Firmware Version: V1.0.0 CWE: CWE-400 - Uncontrolled Resource Consumption Description The U-SPEED Router firmware V1.0.0 is...

CVE-2026-119699

WPGraphQL Smart Cache before 2.3.3 contains an uncontrolled resource consumption vulnerability that allows unauthenticated attackers to persist unlimited query documents via the Automatic Persisted Query handler. Attackers can send distinct queries with matching SHA-256 queryId values, including...

Security Bulletin: Due to the use of xmlschema-core, multiple vulnerabilities are found in CICS Transaction Gateway Desktop Edition.

Summary Due to the use of xmlschema-core, CICS Transaction Gateway Desktop Edition is vulnerable to Uncontrolled Resource Consumption CVE-2026-102495, CVE-2026-102496 vulnerabilities. To address these vulnerabilities, the affected components have been updated in CICS Transaction Gateway Desktop...

Exploit for CVE-2026-117184

CVE-2026-117184 — Unauthenticated Denial of Service via GraphQ...

CVE-2026-119699: WPGraphQL WPGraphQL Smart Cache: WPGraphQL Smart Cache before 2.3.3 contains an uncontrolled resource consumption vulnerability that allows…

WPGraphQL Smart Cache before 2.3.3 contains an uncontrolled resource consumption vulnerability that allows unauthenticated attackers to persist unlimited query documents via the Automatic Persisted Query handler. Attackers can send distinct queries with matching SHA-256 queryId values, including...

CVE-2026-31899

CVE-2026-31899: Exponential DoS via Recursive Element Amplification in CairoSVG Keywords: CVE-2026-31899, CairoSVG, exponential DoS, SVG bomb, recursive use element, denial of service, XML amplification, Python SVG vulnerability, CWE-400, uncontrolled resource consumption, billion laughs SVG Tabl...

Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.

Summary Multiple Vulnerabilities were addressed in IBM Decision Optimization for Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-75140 DESCRIPTION: jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows...

CVE-2026-116656 Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.

Tanium addressed an uncontrolled resource consumption vulnerability in Enforce...

CVE-2026-116659

Tanium addressed an uncontrolled resource consumption vulnerability in the Enforce component. The root cause is identified as the allocation of resources without limits or throttling (CWE-770). This vulnerability could lead to a low availability impact on the system. No specific exploit informati...

CVE-2026-116659 Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.

Tanium addressed an uncontrolled resource consumption vulnerability in Enforce...

CVE-2026-116656

Tanium addressed an uncontrolled resource consumption vulnerability in Enforce . The vulnerability, associated with CWE-400 , has a base severity of HIGH (CVSS 3.1 score of 7.5) because it can impact availability over a network. No specific technical details regarding the root cause, affected com...

CVE-2026-108309

Tanium addressed an uncontrolled resource consumption vulnerability in the Performance Client Extension component. The vulnerability is associated with CWE-770 (Allocation of Resources Without Limits or Throttling), which can lead to high availability impact . The base CVSS 3.1 score is 5.5, refl...

CVE-2026-108309 Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension...

Security Bulletin: IBM Maximo Application Suite uses jackson-databind-2.18.10.jar which is vulnerable to CVE-2026-91776, CVE-2026-91777.

Summary IBM Maximo Application Suite uses jackson-databind-2.18.10.jar which is vulnerable to CVE-2026-91776, CVE-2026-91777. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-91776 DESCRIPTION: TypeDeserializerBase.findDeserializ...

CVE-2026-116878

Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to force quadratic computation by supplying a zero limit to Special:PropertyLabelSimilarity. Attackers can send repeated requests with limit=0 to bypass the SQL...

EUVD-2026-110706

Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to force quadratic computation by supplying a zero limit to Special:PropertyLabelSimilarity. Attackers can send repeated requests with limit=0 to bypass the SQL...

TencentOS Server 4: freerdp (TSSA-2026:1194)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1194 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...