41905 matches found
micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests
A flaw was found in Micrometer. A remote attacker can provide specially crafted HTTP requests, which may lead to a denial-of-service DoS condition. This vulnerability allows an attacker to disrupt the availability of the affected system...
GHSA-V39V-59XW-J98G Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value
Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value Summary Calendar events carry a free-form meta object that is stored exactly as submitted, with no validation of the values inside it. The scheduler reads the per-event alert offset out of that object ...
CVE-2026-9338 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to trigger excessive resource consumption, potentially leading to reduced availability of the affected service...
GHSA-Q5J5-6P94-4GWC Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation
Streaming GetRows row-bound bypass causes attacker-controlled allocation Summary Excelize's prior row-bound fix for GHSA-h69g / CVE-2026-54063 protects the checked worksheet parser, but the streaming worksheet reader used by Rows and GetRows does not enforce the same TotalRows bound on the row r...
Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation
Streaming GetRows row-bound bypass causes attacker-controlled allocation Summary Excelize's prior row-bound fix for GHSA-h69g / CVE-2026-54063 protects the checked worksheet parser, but the streaming worksheet reader used by Rows and GetRows does not enforce the same TotalRows bound on the row r...
PYSEC-2026-3827 Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`
Summary While investigating Django REST Framework's request parsing behavior, I identified that DRF's high-level request.data parsing appears to bypass Django's configured DATAUPLOADMAXMEMORYSIZE protection for application/json and application/x-www-form-urlencoded request bodies. In the tested...
PT-2026-89564
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server version 9.0 IBM WebSphere Application Server version 8.5 Description A remote attacker can cause a denial of service by sending a specially-crafted request. This action triggers excessive resource consumption,...
Fedora 43 : libsoup3 (2026-fce2f41203)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fce2f41203 advisory. Fixes lots of CVEs: see the fixes section for details Tenable has extracted the preceding description block directly from the Fedora security...
corosync-3.1.10-5.1 on GA media (moderate)
corosync-3.1.10-5.1 on GA media Announcement ID: openSUSE-SU-2026:11715-1 Rating: moderate Cross-References: CVE-2026-81665 CVE-2026-81666 CVSS scores: CVE-2026-81665 SUSE : 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-81665 SUSE : 7.7...
CVE-2026-81647
Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-81646
Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-81644
DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-49315
DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-49311
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41987
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41987
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41987
CVE-2026-41987 is a permission control vulnerability in the app management module of a Huawei consumer device, as reported by Huawei's PSIRT (CNA source: [email protected]). Successful exploitation may affect availability , with a CVSS 3.1 base score of 6.2 (MEDIUM) . The attack vector is local , ...
CVE-2026-41987
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...
