28176 matches found
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the findDeserializer method of TypeDeserializerBase, which caches every unknown type ID as a distinct key in the deserializers map even when all of them resolve to the same...
Allocation of Resources Without Limits or Throttling
Overview com.fasterxml.jackson.core:jackson-databind is a library which contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the findDeserializ...
Allocation of Resources Without Limits or Throttling
Overview com.fasterxml.jackson.core:jackson-databind is a library which contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the...
Updated cpio packages fix security vulnerabilities
Path Traversal in GNU cpio. CVE-2026-66484 Uncontrolled Memory Allocation in GNU cpio. CVE-2026-66485 Improper Output Encoding in GNU cpio. CVE-2026-66486...
MGASA-2026-0435 Updated cpio packages fix security vulnerabilities
Path Traversal in GNU cpio. CVE-2026-66484 Uncontrolled Memory Allocation in GNU cpio. CVE-2026-66485 Improper Output Encoding in GNU cpio. CVE-2026-66486...
EUVD-2026-84939
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to cause a denial of service due to allocation of resources without limits or throttling...
The vulnerabilities of the Cisco Secure Firewall Management Center (formerly known as Cisco Firepower Management Center) and the Cisco Secure Firewall Threat Defense (FTD) software are related to uncontrolled memory allocation. This allows attackers to bypass existing security mechanisms or cause service interruptions.
The vulnerability of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center and the Cisco Secure Firewall Threat Defense FTD software lies in the uncontrolled distribution of memory resources. Exploiting this vulnerability could allow a malicious actor to...
CVE-2026-89425: Allocation of Resources Without Limits or Throttling
UTF8DataInputJsonParser.reportInvalidToken in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier characters to a StringBuilder in a loop that has no upper bound. Unlike the three sibling parser implementations, including UTF8StreamJsonParser,...
PT-2026-97563
Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.1.11 RabbitMQ versions prior to 4.2.6 RabbitMQ versions prior to 4.3.0 Description An issue exists in the validate partitions function where it only verifies that the requested partition count is at least 1, withou...
CVE-2026-67235: Allocation of Resources Without Limits or Throttling
RabbitMQ is a messaging and streaming broker. Prior to versions 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15, The content-header BodySize a uint64 was stored without validation against maxmessagesize. The size check ran only when assembly completed. By declaring bodysize = 2^63-1 and then streaming...
CVE-2026-67219: Allocation of Resources Without Limits or Throttling
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, addbinding/3 parses the routing key as an integer weight N and computes ring positions with lists:seqNextN0, NextN0 + N - 1. validatebinding/2 only checks N = 1 , no upper bound. The resulti...
CVE-2026-66080: Allocation of Resources Without Limits or Throttling
RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.11, 4.2.6, and 4.3.0, validatepartitions only checks that the requested partition count is at least 1, with no upper bound. A large count such as lists:seq0, 500000000 allocates roughly 8GB. Preconditions include The...
Foxit PDF Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3...
FreeBSD : mailpit -- Multi-frame animation bypass of thumbnail pixel budget (c1980e14-b424-11f1-bd9f-10ffe07f9334)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c1980e14-b424-11f1-bd9f-10ffe07f9334 advisory. Mailpit author reports: The fix for CVE-2026-67446 / GHSA-75mr-qw9x-3r39 Thumbnail generation decodes...
CVE-2026-18170
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to cause a denial of service due to allocation of resources without limits or throttling...
CVE-2026-18170 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to cause a denial of service due to allocation of resources without limits or throttling...
CVE-2026-18170
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that could allow a remote attacker to cause a denial of service . The root cause is the allocation of resources without limits or throttling . No specific exploit details or remediation instructions are pr...
CVE-2026-18170 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to cause a denial of service due to allocation of resources without limits or throttling...
CVE-2026-93752
A flaw was found in CSSOM. This vulnerability allows a remote attacker to trigger a denial of service by providing a specially crafted stylesheet. The issue stems from improper validation of reserved property names within the CSSStyleDeclaration.setProperty function. Exploiting this, an attacker...