923 matches found
PT-2026-113719
The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display name + comment' parameter in all versions up to, and including, 5.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2026-109339
SurrealDB versions 3.1.0 before 3.3.0 are vulnerable to a memory exhaustion flaw in the Surrealism module . The root cause is that stdout/stderr lines are buffered unbounded in host memory, which bypasses the configured module memory limit. An attacker with Owner privileges can execute a maliciou...
CVE-2026-109339 SurrealDB 3.1.0 before 3.3.0 Memory Exhaustion via Surrealism Module Output Buffering
SurrealDB 3.1.0 before 3.3.0 lets Surrealism modules exhaust server memory because module stdout/stderr lines are buffered unbounded in host memory, bypassing the configured module memory limit. An attacker can run an Owner-installed malicious module that writes output without newlines, crashing...
CVE-2026-109339: Allocation of Resources Without Limits or Throttling
SurrealDB 3.1.0 before 3.3.0 lets Surrealism modules exhaust server memory because module stdout/stderr lines are buffered unbounded in host memory, bypassing the configured module memory limit. An attacker can run an Owner-installed malicious module that writes output without newlines, crashing...
CLEANSTART-2026-VK65361 Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service
Security vulnerability affects the apache2 package. Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service...
GHSA-26WQ-P25C-J6FV msgpack5: Reserved byte can cause unbounded stream buffering
Impact The reserved MessagePack byte 0xc1 is incorrectly treated as incomplete input. When it appears at the start of a decoder stream, all subsequent data is retained while the decoder waits for bytes that can never make the value valid, allowing memory exhaustion. Patches The decoder now reject...
NPM: msgpack5: Reserved byte can cause unbounded stream buffering
NPM: msgpack5: Reserved byte can cause unbounded stream buffering vulnerability discovered by ? in WordPress Npm msgpack5 versions 6.1.0...
CVE-2026-107299 msgpack5: Reserved byte can cause unbounded stream buffering
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder treats the reserved MessagePack byte 0xc1 as incomplete input instead of invalid input. When 0xc1 begins a stream, subsequent data remains buffered while the decoder waits for bytes that...
PT-2026-106601
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A buffer overflow exists in the page pool allocation of the mvpp2 network driver. The issue occurs when mvpp2 change mtu calls mvpp2 bm switch bufferspriv, true without verifying if the...
SUSE SLES16: glib2-devel / glib2-devel-static / glib2-doc / glib2-lang / etc (SUSE-SU-2026:23980-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:23980-1 advisory. This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering...
Astra Linux – Vulnerability in Apache2
HTTP/2 incoming headers that exceed the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client continues to send headers, this can lead to memory exhaustion...
Astra Linux – Vulnerability in Linux, Linux 5.10
A guest can force the Linux netback driver to consume a large amount of kernel memory. This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVEs. Incoming data packets for a guest in the Linux kernel’s netback driver are buffere...
openSUSE 16: gio-branding-upstream / glib2-devel / glib2-devel-static / etc (openSUSE-SU-2026:21977-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21977-1 advisory. This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering bsc1272206...
Rocky Linux 8 [CIQ] Security Update: bind-dyndb-ldap / bind-dyndb-ldap-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_21140)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202521140 advisory. python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV CVE-2025-59088 python-kdcproxy: Remote DoS via unbounded TCP upstream buffering...
Rocky Linux 10.1 [CIQ] Security Update: python3-kdcproxy Multiple Vulnerabilities (crlsa-2025_21142)
The Rocky Linux 10.1 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202521142 advisory. python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV CVE-2025-59088 python-kdcproxy: Remote DoS via unbounded TCP upstream buffering...
Rocky Linux 9 [CIQ] Security Update: python3-kdcproxy Multiple Vulnerabilities (crlsa-2025_21139)
The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202521139 advisory. python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV CVE-2025-59088 python-kdcproxy: Remote DoS via unbounded TCP upstream buffering...
Security update for glib2 (moderate)
openSUSE security update: security update for glib2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21977-1 Rating: moderate References: bsc1272206 Cross-References: CVE-2026-15588 CVSS scores: CVE-2026-15588 SUSE : 5.3...
CVE-2026-103472 restbed through 5.0.0 WebSocket Memory Exhaustion via Unbounded Frame Buffering
restbed through 5.0.0 accepts WebSocket frames with declared payload lengths up to 2^63 bytes and buffers the payload without size limits in an unbounded stream buffer. Remote unauthenticated attackers can declare large frame sizes and stream payload data to exhaust server memory, causing denial ...