11929 matches found
grafana: Grafana: Denial of Service via uncontrolled memory usage in alertmanager templates
A flaw was found in Grafana. A remote attacker with very low privileges, or even anonymous access if enabled, can exploit the alertmanager templates test endpoint by mass-executing templates. This can lead to an Out-Of-Memory OOM error, causing the Grafana service to crash and resulting in a Deni...
PT-2026-88309
ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not...
CVE-2026-69378: Uncontrolled Recursion
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network...
CVE-2026-82001: Uncontrolled Resource Consumption
Acrobat Reader is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue requires...
CVE-2026-76199: Uncontrolled Search Path Element
Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that...
CVE-2026-76000: Uncontrolled Resource Consumption
ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not...
CVE-2026-72980: Uncontrolled Search Path Element
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...
CVE-2026-73321: Uncontrolled Recursion
XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser that allows authenticated attackers to cause persistent denial of service by submitting a post with deeply nested BBCode tags. Attackers can craft a single malicious post with sufficient nesting depth to...
CVE-2026-12611: Uncontrolled Resource Consumption
A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never unblocked, eventually causing all threads to be blocked and the whole server to become unresponsive. This is caused by a race condition in the server when handling RSTSTREAM frames and GOAWAY frames...
PT-2026-87041
Name of the Vulnerable Software and Affected Versions Qt versions 4.0 and later Description Uncontrolled recursion occurs in the serialization path of the Qt XML module QtXml, qtbase. The functions QDomElementPrivate::save and QDomNodePrivate::save recurse mutually without a depth limit or...
CVE-2026-11573: Uncontrolled Recursion
Uncontrolled recursion CWE-674 in the QDomDocument/QDomNode serialization path of the Qt XML module QtXml, qtbase. QDomElementPrivate::save and QDomNodePrivate::save recurse mutually, consuming one stack frame per level of element nesting with no depth limit, no configurable bound and no error...
CVE-2026-86734: Uncontrolled Resource Consumption
Snipe-IT before 8.7.1 fails to validate the length of the note field in the POST /account/accept/acceptance endpoint, allowing authenticated users to submit unbounded input that reaches synchronous CommonMark rendering. Attackers can submit large note values to exhaust PHP worker CPU and cause...
CVE-2026-72923: Uncontrolled Resource Consumption
The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model. In Microsoft.OpenApi.Readers versions before 1.6.30 and Microsoft.OpenApi.YamlReader from 2.0.0-preview.11 through 2.11.0 a...
PT-2026-87066
XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser that allows authenticated attackers to cause persistent denial of service by submitting a post with deeply nested BBCode tags. Attackers can craft a single malicious post with sufficient nesting depth to...
ROS-20260908-73-0018
The vulnerability in Java 1.8.0-openjdk is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260908-73-0019
The vulnerability in Java-11-openjdk is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
PT-2026-88521
Name of the Vulnerable Software and Affected Versions go-attestation versions prior to 0.6.2 Description An uncontrolled recursion issue in the Windows SIPA event log parser allows a remote attacker to cause a denial of service DoS. The readELAMAggregation function in the WinEvents object recurse...
PT-2026-87167
Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process. An unauthenticated client with network access to a router port...
Adobe Photoshop 26.x < 26.11.7 / 27.x < 27.7 Multiple Vulnerabilities (macOS APSB26-130)
The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 26.11.7/27.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-130 advisory. - Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could...