Lucene search
K

22327 matches found

OSV
OSV
added 2026/04/01 9:16 p.m.0 views

DEBIAN-CVE-2026-34513

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation. This issue has been patched in version 3.13.4...

7.5CVSS5.3AI score0.0002EPSS
Exploits0References1
NVD
NVD
added 2026/04/01 9:16 p.m.2 views

CVE-2026-34513

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation. This issue has been patched in version 3.13.4...

7.5CVSS0.0002EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2026/04/01 9:16 p.m.1 views

CVE-2026-34513

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation. This issue has been patched in version 3.13.4...

7.5CVSS5.8AI score0.0002EPSS
Exploits0References4
OSV
OSV
added 2026/04/01 9:16 p.m.0 views

UBUNTU-CVE-2026-34513

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation. This issue has been patched in version 3.13.4...

7.5CVSS5.8AI score0.0002EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/01 8:6 p.m.19 views

CVE-2026-34513 AIOHTTP: Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation. This issue has been patched in version 3.13.4...

6.9CVSS0.0002EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2026/04/01 8:6 p.m.3 views

CVE-2026-34513

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation. This issue has been patched in version 3.13.4...

7.5CVSS5.3AI score0.0002EPSS
Exploits0
CVE
CVE
added 2026/04/01 8:6 p.m.18 views

CVE-2026-34513

CVE-2026-34513 affects aiohttp prior to 3.13.4, where an unbounded DNS cache could cause excessive memory usage leading to a DoS. The issue has been patched in 3.13.4. Affected component: aiohttp (async HTTP client/server for asyncio). Root cause: unbounded DNS cache memory growth. Impact: potent...

7.5CVSS5.8AI score0.0002EPSS
Exploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/01 8:6 p.m.3 views

CVE-2026-34513

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation. This issue has been patched in version 3.13.4...

6.9CVSS5.8AI score0.0002EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2026/04/01 4:48 p.m.4 views

CLSA-2026-1775062103 squid34: Fix of 2 CVEs

CVE-2026-33526: fix heap Use-After-Free in ICP traffic handling causing DoS - CVE-2026-32748: fix HttpRequest lifetime in ICP v3 queries preventing Use-After-Free DoS...

9.2CVSS5.8AI score0.01395EPSS
Exploits0References1
OSV
OSV
added 2026/04/01 9:24 a.m.1 views

OPENSUSE-SU-2026:20452-1 Security update for kea

This update for kea fixes the following issues: Update to 3.0.3: - CVE-2025-11232: invalid characters cause assert bsc1252863. - CVE-2026-3608: stack overflow via maliciously crafted message bsc1260380. Changelog: A large number of bracket pairs in a JSON payload directed to any endpoint would...

7.5CVSS7.1AI score0.00036EPSS
Exploits0References4
OSV
OSV
added 2026/04/01 9:10 a.m.2 views

CLEANSTART-2026-MJ07404 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-527x-5wrf-22m2, ghsa-9h8m-3fm2-qjrq, ghsa-c9v3-4pv7-87pr, ghsa-h75p-j8xm-m278, ghsa-p77j-4mvh-x3m3 applied in versions: 1.26.7-r0, 1.26.7-r1, 1.26.7-r2

Multiple security vulnerabilities affect the kubernetes-dns-node-cache-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

9.1CVSS7.2AI score0.00044EPSS
Exploits1References14
OSV
OSV
added 2026/04/01 9:10 a.m.0 views

CLEANSTART-2026-GQ31133 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-527x-5wrf-22m2, ghsa-9h8m-3fm2-qjrq, ghsa-c9v3-4pv7-87pr, ghsa-h75p-j8xm-m278, ghsa-p77j-4mvh-x3m3 applied in versions: 1.26.7-r0, 1.26.7-r1, 1.26.7-r2

Multiple security vulnerabilities affect the kubernetes-dns-node-cache package. These issues are resolved in later releases. See references for individual vulnerability details...

9.1CVSS7.2AI score0.00044EPSS
Exploits1References14
AstraLinux
AstraLinux
added 2026/04/01 3:55 a.m.1 views

Astra Linux – Vulnerability in Firefox

Bypass of mitigation mechanisms in the Networking: Cache component. This vulnerability has been fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

9.8CVSS5.3AI score0.00028EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/01 3:31 a.m.1 views

EUVD-2026-17755

The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state. When a script modifies the zoom property and then triggers a page change, the original view object may be destroyed while stale pointers...

5.5CVSS6AI score0.0002EPSS
Exploits0References2
NVD
NVD
added 2026/04/01 2:16 a.m.1 views

CVE-2026-3777

The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state. When a script modifies the zoom property and then triggers a page change, the original view object may be destroyed while stale pointers...

7.8CVSS0.0002EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/01 1:40 a.m.0 views

CVE-2026-3777 Use after free of view cache in Foxit PDF Editor/Reader

The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state. When a script modifies the zoom property and then triggers a page change, the original view object may be destroyed while stale pointers...

5.5CVSS6AI score0.0002EPSS
Exploits0References1
CVE
CVE
added 2026/04/01 1:40 a.m.7 views

CVE-2026-3777

Summary: CVE-2026-3777 affects Foxit PDF Editor/Reader (multiple platforms). The vulnerability is a use-after-free caused by improper validation of lifetime/validity of internal view cache pointers after JavaScript alters document zoom and page state. When a script modifies zoom and triggers a pa...

7.8CVSS6AI score0.0002EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2026/04/01 1:40 a.m.16 views

CVE-2026-3777 Use after free of view cache in Foxit PDF Editor/Reader

The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state. When a script modifies the zoom property and then triggers a page change, the original view object may be destroyed while stale pointers...

5.5CVSS0.0002EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/01 12:31 a.m.4 views

EUVD-2026-17725

A vulnerability was determined in Axiomatic Bento4 up to 1.6.0-641. This impacts the function AP4BitReader::ReadCache of the file Ap4Dac4Atom.cpp of the component MP4 File Parser. This manipulation causes heap-based buffer overflow. The attack needs to be launched locally. The exploit has been...

5.3CVSS5.8AI score0.00007EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/04/01 12:30 a.m.30 views

CVE-2025-71280 XenForo Local Account Page Caching Information Disclosure

XenForo before 2.3.7 allows information disclosure via local account page caching on shared systems. On systems where multiple users share a browser or machine, cached account pages could expose sensitive user information to other local users...

6.9CVSS0.00017EPSS
Exploits0References2
Rows per page
Query Builder