29108 matches found
.NET 10.0 security, bug fix, and enhancement update
An update is available for dotnet10.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...
.NET 8.0 security, bug fix, and enhancement update
An update is available for dotnet8.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...
RLSA-2026:41899 Important: .NET 9.0 security, bug fix, and enhancement update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.119 and .NET Runtime 9.0.18...
RLSA-2026:41901 Important: .NET 8.0 security, bug fix, and enhancement update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.129 and .NET Runtime 8.0.29...
CVE-2026-8287: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling vulnerability in BizimHesap Information Systems Industry and Trade Inc. Online Pre-Accounting Software allows Excessive Allocation. This issue affects Online Pre-Accounting Software: through 17072026...
CVE-2026-25800: Allocation of Resources Without Limits or Throttling
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the Assembler component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous...
PT-2026-64001
Allocation of resources without limits or throttling vulnerability in BizimHesap Information Systems Industry and Trade Inc. Online Pre-Accounting Software allows Excessive Allocation. This issue affects Online Pre-Accounting Software: through 17072026...
Linux kernel driver Heap Buffer Overflow DoS
The vulnerability of the hnsroceallocmr function in the drivers/infiniband/hw/hns/hnsrocemr.c file of the Linux operating system’s kernel driver InfiniBand is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the kmallocreserve function in the net/core/skbuff.c module, which supports network functions of the Linux kernel, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service failure...
RockyLinux 10 : .NET 9.0 (RLSA-2026:41895)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:41895 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...
Alibaba Cloud Linux 3 : 0217: python-pillow (ALINUX3-SA-2026:0217)
The remote Alibaba Cloud Linux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0217 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-54059: Pillow is a Python imaging...
RHEL 10 : .NET 8.0 (RHSA-2026:41893)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41893 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...
RockyLinux 9 : .NET 8.0 (RLSA-2026:41894)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:41894 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...
CVE-2026-13063
An authenticated user with standard read/write privileges can cause the mongod process to terminate due to an out-of-memory condition by sending a crafted aggregation command. MongoDB's libmongocrypt library insufficiently validates payload-supplied values, which can result in an excessively larg...
UBUNTU-CVE-2026-13063
An authenticated user with standard read/write privileges can cause the mongod process to terminate due to an out-of-memory condition by sending a crafted aggregation command. MongoDB's libmongocrypt library insufficiently validates payload-supplied values, which can result in an excessively larg...
CVE-2026-13063 libmongocrypt Improper Input Validation Leading to Process Termination
An authenticated user with standard read/write privileges can cause the mongod process to terminate due to an out-of-memory condition by sending a crafted aggregation command. MongoDB's libmongocrypt library insufficiently validates payload-supplied values, which can result in an excessively larg...
libmongocrypt Improper Input Validation Leading to Process Termination
An authenticated user with standard read/write privileges can cause the mongod process to terminate due to an out-of-memory condition by sending a crafted aggregation command. MongoDB's libmongocrypt library insufficiently validates payload-supplied values, which can result in an excessively larg...
CVE-2026-13075
The CVE-2026-13075 entry concerns MongoDB: an authenticated user can terminate the mongod process under memory pressure by triggering unbounded memory allocation in the error-suggestion path via the $rankFusion and $scoreFusion aggregation stages. Root cause is in the server’s error-handling path...
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue CVE-2026-61870: Memory leak in VIFF encoder when allocation fails bsc1271293. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run...