2144 matches found
Security Bulletin: Vulnerability in pypdf bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage.
Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage include the pypdf library, which is affected by multiple vulnerabilities, including infinite loop and denial of service vulnerabilities. CVE-2025-66019, CVE-2026-22690, CVE-2026-22691. Vulnerability Details...
Vulnerability of the Audio/Video component: Playback in Firefox web browser and Thunderbird email client, allowing attackers to trigger a service failure
The vulnerability of the Audio/Video component: Playback in Firefox web browser and Thunderbird email client involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2026-69659 Memory exhaustion via unbounded deserialization of keyset pagination cursors in Ash.Page.Keyset
Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to exhaust the memory of the node via a crafted keyset pagination cursor. Read actions with keyset pagination deserialize the client-supplied page:after or page:before cursor in decodevalues/2 in...
Linux Distros Unpatched Vulnerability : CVE-2026-19014
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect authorization...
CVE-2026-19014
CVE-2026-19014 affects Consul Community Edition and Consul Enterprise 1.17.0–2.0.2, where an uncontrolled resource consumption in the Connect authorization endpoint can grow the agent’s intention-match cache beyond bounds, bypassing cache-disable settings. Fixed in Consul 2.0.3 and Consul Enterpr...
Security Bulletin: IBM SPSS Modeler is affected by Uncontrolled Resource Consumption vulnerability in Apache HttpComponents Core
Summary Security Bulletin: IBM SPSS Modeler is affected by Uncontrolled Resource Consumption vulnerability in Apache HttpComponents Core. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-54399 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in...
PT-2026-69121
Name of the Vulnerable Software and Affected Versions Consul Community Edition versions 1.2.0 through 2.0.2 Consul Enterprise versions 1.2.0 through 2.0.2 Description An uncontrolled resource consumption issue exists in the Connect CA roots endpoint. This allows a remote caller to expand the...
K000162737: Apache Tomcat vulnerability CVE-2026-66299
Security Advisory Description Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0-M20 through 11.0.24, from 10.1.24 through 10.1.57, from 9.0.89 through 9.0.120. Users who have followed the security guidance to...
Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - IoT Component uses HdrHistogram-2.1.12.jar which is vulnerable to CVE-2026-14683, CVE-2026-14684, CVE-2026-14685, CVE-2026-14686. This bulletin contains information regarding the vulnerability and how to address it. Vulnerability Details CVEID:CVE-2026-14683...
The vulnerability of the formDataToJSON function in the axios library allows a attacker to cause a service failure.
The vulnerability of the formDataToJSON function in the axios library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the axios library, related to uncontrolled resource consumption, allows attackers to compromise the accessibility of protected information.
The vulnerability of the axios library is related to an uncontrolled resource consumption when processing the maxBodyLength parameter. Exploiting this vulnerability could allow a remote attacker to compromise the accessibility of the protected information...
The vulnerability of the Python library for working with Git repositories in Dulwich, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the Python library for working with Git repositories in Dulwich is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the brace-expansion library in the Node.js software platform, related to uncontrolled resource consumption, allows attackers to trigger a service failure.
The vulnerability of the brace-expansion library on the Node.js software platform is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Grafana monitoring and observation platform, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the Grafana monitoring and observation platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
ROS-20260729-73-0027
The vulnerability in coredns is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Rockwell Automation Micro850/870 Uncontrolled Resource Consumption (CVE-2024-7567)
A denial-of-service vulnerability exists via the CIP/Modbus port in Micro850/870. If exploited, the CIP/Modbus communication may be disrupted for a short duration. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...
CVE-2026-66299
Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0-M20 through 11.0.24, from 10.1.24 through 10.1.57, from 9.0.89 through 9.0.120. Users who have followed the security guidance to remove the examples web...
BIT-KIBANA-2026-63139 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
Uncontrolled Resource Consumption CWE-400 in Kibana can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated low-privileged user can exploit an uncontrolled resource consumption vulnerability in Kibana's Canvas functionality by sending a specially crafted request, causin...