Allocation of Resources Without Limits or Throttling

Overview @openclaw/feishu is an OpenClaw Feishu/Lark channel plugin community maintained by @m1heng Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the installRequestBodyLimitGuard function in the Feishu webhook handler, which appli...

CVE-2026-3991

Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain...

CVE-2025-66037

OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzzpkcs15reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, scpkcs15pubkeyfromspkifields allocates a zero-length buffer...

CVE-2026-27508

CVE-2026-27508 affects Smoothwall Express versions prior to 3.1 Update 13. The issue is a reflected XSS in the /redirect.cgi endpoint caused by improper sanitation of the url parameter. Attackers can craft URLs containing javascript: schemes that execute arbitrary JavaScript in a victim’s browser...

CVE-2026-26352

Affected product/versions: Smoothwall Express

CVE-2026-23340 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23340 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-71265 affecting package kernel for versions less than 6.6.130.1-1

CVE-2025-71265 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23334 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23334 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23392 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23392 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23368 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23368 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23381 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23381 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-32287 affecting package terraform for versions less than 1.3.2-30

CVE-2026-32287 affecting package terraform for versions less than 1.3.2-30. A patched version of the package is available...

CVE-2026-33542 affecting package telegraf for versions less than 1.29.4-22

CVE-2026-33542 affecting package telegraf for versions less than 1.29.4-22. An upgraded version of the package is available that resolves this issue...

CVE-2026-32287 affecting package telegraf for versions less than 1.29.4-22

CVE-2026-32287 affecting package telegraf for versions less than 1.29.4-22. A patched version of the package is available...

CVE-2026-27651 affecting package nginx for versions less than 1.22.1-16

CVE-2026-27651 affecting package nginx for versions less than 1.22.1-16. A patched version of the package is available...

CVE-2026-4645 affecting package terraform for versions less than 1.3.2-30

CVE-2026-4645 affecting package terraform for versions less than 1.3.2-30. A patched version of the package is available...

CVE-2026-5170 Users could trigger a crash of mongod primaries during promotion to sharded

A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window when the cluster is being promoted from a replica set to a sharded cluster. This may cause a denial of service by taking down the primary o...

Users could trigger a crash of mongod primaries during promotion to sharded

A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window when the cluster is being promoted from a replica set to a sharded cluster. This may cause a denial of service by taking down the primary o...

CVE-2026-28527

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller GETPLAYERAPPLICATIONSETTINGATTRIBUTETEXT and GETPLAYERAPPLICATIONSETTINGVALUETEXT handlers that allows nearby attackers to read beyond packet boundaries. Attackers can establish a paire...

SUSE CVE-2020-14391

A flaw was found in the GNOME Control Center in Red Hat Enterprise Linux 8 versions prior to 8.2, where it improperly uses Red Hat Customer Portal credentials when a user registers a system through the GNOME Settings User Interface. This flaw allows a local attacker to discover the Red Hat Custom...