22769 matches found
CVE-2026-49788
Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network...
CVE-2026-45646
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-40378
Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...
CVE-2026-49788
CVE-2026-49788 : An HTTP/2 denial-of-service vulnerability due to unbounded resource allocation allows an unauthenticated network attacker to exhaust resources and disrupt service. CVSSv3.1 base score 7.5 (HIGH); vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. No product/vendor/version details are p...
CVE-2026-49787
The CVE-2026-49787 entry describes a Denial of Service vulnerability in Windows HTTP.sys caused by allocation of resources without limits or throttling, leading to an unauthorized network-based disruption. Affected component is HTTP.sys on Windows; impact is availability (denial of service) with ...
CVE-2026-45646
The provided records describe CVE-2026-45646 as a Denial of Service vulnerability in ASP.NET Core caused by allocation of resources without limits or throttling, enabling an unauthenticated attacker to disrupt services over the network. Concrete details in the connected documents include the affe...
CVE-2026-40378
CVE-2026-40378 affects Windows Local Security Authority Subsystem Service (LSASS). A memory allocation with an excessive size value can allow an unauthenticated attacker to cause a network-based denial of service. The CVSSv3.1 base score is 7.5 (HIGH). No exploitation details are provided in the ...
CVE-2026-56170
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-56170
CVE-2026-56170 concerns ASP.NET Core where resources are allocated without limits or throttling, enabling a network-based DoS from an unauthenticated attacker. The NVD entry attributes a CVSS v3.1 base score of 7.5 (HIGH) with network attack vector, low attack complexity, no privileges required, ...
CVE-2026-50506
CVE-2026-50506 concerns a Denial of Service vulnerability in ASP.NET Core caused by allocation of resources without limits or throttling, enabling an unauthenticated attacker to exhaust resources over the network. The NVD entry and CVE records describe this as affecting ASP.NET Core (and related ...
CVE-2026-50506
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
HTTP/2 Denial of Service Vulnerability
Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network...
.NET Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
.NET Framework Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network...
.NET Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
python-pillow: Pillow: Denial of Service via crafted GD 2.x image file
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile.open function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a...
PT-2026-58160
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An issue exists where the allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to cause a denial-of-service over a...
PT-2026-61745
Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.136.Final Netty versions prior to 4.2.16.Final Description An issue exists in the SPDY protocol implementation where header decoding continues inflating zlib-compressed header blocks even after the raw header parser...
