2752 matches found
Uncontrolled Recursion
Overview nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Uncontrolled Recursion via parseAddresses in src/mime-node/index.ts when a recipient field is supplied as a deeply nested array. The native array-to-string...
Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to Uncontrolled Recursion due to IBM Java (CVE-2026-16440)
Summary IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to Uncontrolled Recursion due to IBM Java. Vulnerability Details CVEID:CVE-2026-16440 DESCRIPTION: In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation...
Uncontrolled Recursion
Overview org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol is an AMQP 0-8, 0-9 and 0-9-1 protocol broker plug-in. Affected versions of this package are vulnerable to Uncontrolled Recursion through unbounded nesting of types in the field-table processing. An attacker can cause a stack overflow...
Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in axios (CVE-2026-67312, CVE-2026-67313, CVE-2026-67316, CVE-2026-67317, CVE-2026-67319)
Summary Multiple vulnerabilities in the axios HTTP client library CVE-2026-67312, CVE-2026-67313, CVE-2026-67316, CVE-2026-67317, CVE-2026-67319 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 1.18.0. Vulnerability Details CVEID:CVE-2026-67312...
ROS-20260925-73-0148
The vulnerability of the BTFID function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux’s operating system, is related to an uncontrolled recursion. Exploiting this vulnerability could allow a attacker to cause a service failure...
MongoDB BSON Document Verification DoS
The vulnerability of the BSON document verification mechanism in the MongoDB database management system is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Elasticsearch Uncontrolled Recursion DoS
The vulnerability of the Elasticsearch search engine is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Adobe Bridge 15.1.7 < 15.1.8 / 16.x < 16.0.7 Multiple Vulnerabilities (APSB26-148)
The version of Adobe Bridge installed on the remote Windows host is prior to 15.1.8 or 16.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-148 advisory. - Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code...
CVE-2026-61811: Uncontrolled Recursion
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.8.0 until 4.14.7, the getattributes function in src/osxml/osxml.c recursively processes every XML attribute without a depth limit while allocating two large local buffers ...
Oracle Linux 8 : postgresql:12 (ELSA-2026-69924)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69924 advisory. - Add backport of CVE-2025-8714 Orabug: 38667546 - Resolves: CVE-2026-14662, CVE-2026-14664, CVE-2026-14668, CVE-2026-14669 - Resolves: CVE-2026-14670...
CVE-2026-91863
A flaw was found in Apache Neethi. A remote attacker could exploit this vulnerability by sending a specially crafted WS-Policy document containing deeply nested policy elements. This crafted document can bypass the parser's nesting-depth limit, leading to uncontrolled recursion that exhausts the...
CVE-2026-78253
A flaw was found in Qt. An attacker can exploit uncontrolled recursion in the QXmlStreamReader::readElementText function by providing a specially crafted XML document. This can lead to a denial of service DoS, causing the application to crash due to stack exhaustion...
CVE-2026-78253
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
AZL-106827 CVE-2026-78253 affecting package qtbase 6.6.3-6
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
UBUNTU-CVE-2026-78253
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
CVE-2026-78253
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
CVE-2026-78253
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
EUVD-2026-85238
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
Linux Distros Unpatched Vulnerability : CVE-2026-78253
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion...
PT-2026-97291
Name of the Vulnerable Software and Affected Versions Qt affected versions not specified Description Uncontrolled recursion in the readElementText function of QXmlStreamReader allows attackers to cause a denial of service. This occurs when the application processes a crafted XML document, leading...