11904 matches found
CVE-2026-103087
The Gosub browser engine (gosub-engine ) is vulnerable to uncontrolled recursion in versions through 0.1.0 and main before commit 46868b3 . An attacker can trigger a Denial of Service (stack exhaustion and application crash) by providing an SVG document with excessively nested elements. The engin...
CVE-2026-103087
Uncontrolled recursion in the Gosub browser engine gosub-engine through 0.1.0 and main before commit 46868b3 allows a remote attacker to cause a Denial of Service stack exhaustion and application crash via an SVG document containing an excessive number of deeply nested elements. Because the engin...
CVE-2026-103087
Uncontrolled recursion in the Gosub browser engine gosub-engine through 0.1.0 and main before commit 46868b3 allows a remote attacker to cause a Denial of Service stack exhaustion and application crash via an SVG document containing an excessive number of deeply nested elements. Because the engin...
CentOS Linux 8 [TuxCare] Security Update: perl / perl-Attribute-Handlers / perl-Devel-Peek / etc (CENTOS-STREAM8:CLSA-2025:1755270634)
The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2025:1755270634 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEV...
CentOS Linux 8.4 [TuxCare] Security Update: perl / perl-Attribute-Handlers / perl-Devel-Peek / etc (CENTOS8.4:CLSA-2025:1755513271)
The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1755513271 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...
CentOS Linux 8 [TuxCare] Security Update: expat / expat-devel / expat-static (CENTOS-STREAM8:CLSA-2026:1779183996)
The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1779183996 advisory. - In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately siz...
AlmaLinux 9.2 [TuxCare] Security Update: perl / perl-Attribute-Handlers / perl-AutoLoader / perl-AutoSplit / etc (ALMALINUX9.2:CLSA-2026:1778492641)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778492641 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: perl-DBI (UTSA-2026-126158)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-126158 advisory. DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI...
CVE-2026-102724
NULL Pointer Dereference When Evicting the Sole MSRP Attribute...
GHSA-P9F8-WVJ8-2FG8 OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation
Summary The OpenTelemetry Go SDK trace package can fail to enforce AttributeValueLengthLimit for string attributes containing the valid Unicode replacement character U+FFFD. An oversized attacker-controlled attribute value that includes U+FFFD is returned untruncated, bypassing the configured...
CVE-2026-102725
Out-of-bounds Read from Unvalidated MSRP Attribute List Length...
CVE-2026-102725
The software component netxduo (specifically within the eclipse-threadx ecosystem) is vulnerable to an Out-of-bounds Read caused by an Unvalidated MSRP Attribute List Length . The vulnerability could impact system availability . No specific versions, root causes beyond the unvalidated length, or ...
EUVD-2026-89191
Out-of-bounds Read from Unvalidated MSRP Attribute List Length...
CVE-2026-102724
NULL Pointer Dereference When Evicting the Sole MSRP Attribute...
CVE-2026-102724
NULL Pointer Dereference When Evicting the Sole MSRP Attribute...
EUVD-2026-89190
NULL Pointer Dereference When Evicting the Sole MSRP Attribute...
CVE-2026-102724
The Eclipse ThreadX networking stack NetX Duo is affected by a NULL Pointer Dereference vulnerability. The issue occurs specifically when the system attempts to evict the sole MSRP attribute . This flaw can lead to a High Availability impact, as indicated by the CVSS 4.0 metrics. While the vulner...
CVE-2026-102724
NULL Pointer Dereference When Evicting the Sole MSRP Attribute...