44236 matches found
GHSA-Q5J5-6P94-4GWC Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation
Streaming GetRows row-bound bypass causes attacker-controlled allocation Summary Excelize's prior row-bound fix for GHSA-h69g / CVE-2026-54063 protects the checked worksheet parser, but the streaming worksheet reader used by Rows and GetRows does not enforce the same TotalRows bound on the row r...
PYSEC-2026-3827 Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`
Summary While investigating Django REST Framework's request parsing behavior, I identified that DRF's high-level request.data parsing appears to bypass Django's configured DATAUPLOADMAXMEMORYSIZE protection for application/json and application/x-www-form-urlencoded request bodies. In the tested...
PT-2026-89564
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server version 9.0 IBM WebSphere Application Server version 8.5 Description A remote attacker can cause a denial of service by sending a specially-crafted request. This action triggers excessive resource consumption,...
corosync-3.1.10-5.1 on GA media (moderate)
corosync-3.1.10-5.1 on GA media Announcement ID: openSUSE-SU-2026:11715-1 Rating: moderate Cross-References: CVE-2026-81665 CVE-2026-81666 CVSS scores: CVE-2026-81665 SUSE : 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-81665 SUSE : 7.7...
Fedora 43 : libsoup3 (2026-fce2f41203)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fce2f41203 advisory. Fixes lots of CVEs: see the fixes section for details Tenable has extracted the preceding description block directly from the Fedora security...
CVE-2026-81646
Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-81644
DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-81647
Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-49315
DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-49311
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41987
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41987
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41987
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2026-74614
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41987
CVE-2026-41987 is a permission control vulnerability in the app management module of a Huawei consumer device, as reported by Huawei's PSIRT (CNA source: [email protected]). Successful exploitation may affect availability , with a CVSS 3.1 base score of 6.2 (MEDIUM) . The attack vector is local , ...
EUVD-2026-74612
DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-49315
CVE-2026-49315 is a denial-of-service vulnerability in the input device module of a Huawei consumer device, as identified by Huawei's PSIRT (CNA). The flaw allows a local attacker with no privileges required to cause a high impact on availability, with a CHANGED scope , yielding a CVSS 3.1 base s...
CVE-2026-49315
DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-81647
CVE-2026-81647 is an out-of-bounds read vulnerability in the graphics module of Huawei consumer devices, as indicated by the CNA source ([email protected]) and references to Huawei consumer security bulletins for September 2026. Successful exploitation may result in a low availability impact . The...