693 matches found
popeye
Popeye: Kubernetes Live Cluster Linter Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestra...
CVE-2026-115907
A flaw was found in zip. This vulnerability allows a remote attacker to cause a Denial of Service DoS by submitting a specially crafted ZIP archive. When handling legacy compression formats, the library attempts to allocate output memory based on an unverified, attacker-controlled file size befor...
zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size
Summary A malicious 149-byte ZIP archive can cause a denial of service in applications that enable legacy-zip and use ZipArchive::extract. An attacker-controlled ZIP64 uncompressed size triggers a capacity overflow panic in the Shrink decoder in optimized builds, potentially terminating the...
GHSA-9HJ8-73FH-9963 zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size
Summary A malicious 149-byte ZIP archive can cause a denial of service in applications that enable legacy-zip and use ZipArchive::extract. An attacker-controlled ZIP64 uncompressed size triggers a capacity overflow panic in the Shrink decoder in optimized builds, potentially terminating the...
CVE-2026-99142
In the Linux kernel, the following vulnerability has been resolved: tracing: Check operator stack capacity before pushing predicateparse uses the first operator stack entry before processing any opening parentheses. A push then increments top before writing. The existing check still permits that...
CVE-2026-117554
Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additionalguests field when guests are disallowed. Attackers can set additionalguests to the remaining seat count in modules/events/eventsfunction.p...
CVE-2026-117554 Admidio before 5.0.17 Event Guest Restriction Bypass via events_function.php
Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additionalguests field when guests are disallowed. Attackers can set additionalguests to the remaining seat count in modules/events/eventsfunction.p...
EUVD-2026-110832
Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additionalguests field when guests are disallowed. Attackers can set additionalguests to the remaining seat count in modules/events/eventsfunction.p...
CVE-2026-117554 Admidio before 5.0.17 Event Guest Restriction Bypass via events_function.php
Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additionalguests field when guests are disallowed. Attackers can set additionalguests to the remaining seat count in modules/events/eventsfunction.p...
CVE-2026-117554
Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additionalguests field when guests are disallowed. Attackers can set additionalguests to the remaining seat count in modules/events/eventsfunction.p...
CVE-2026-117554
Admidio versions before 5.0.17 are vulnerable to an improper access control vulnerability in modules/events/events_function.php. Authenticated members can bypass guest restrictions by submitting the additional_guests field when guests are otherwise disallowed. This allows an attacker to set the v...
PT-2026-126413
Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additional guests field when guests are disallowed. Attackers can set additional guests to the remaining seat count in modules/events/events...
CVE-2026-70380
A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment MICE service. An unauthenticated attacker with network access to the MICE service could consume available connection capacity, preventing legitimate users from establishing MICE-base...
CVE-2026-70380 Resource Exhaustion in MICE Service
A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment MICE service. An unauthenticated attacker with network access to the MICE service could consume available connection capacity, preventing legitimate users from establishing MICE-base...
CVE-2026-70380
A denial-of-service vulnerability exists in the Miracast over Infrastructure Connection Establishment (MICE) service due to uncontrolled resource consumption (CWE-400). An unauthenticated attacker with network access can exhaust connection capacity, preventing legitimate users from establishing M...
CVE-2026-70380 Resource Exhaustion in MICE Service
A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment MICE service. An unauthenticated attacker with network access to the MICE service could consume available connection capacity, preventing legitimate users from establishing MICE-base...
CVE-2026-115907
zip is a zip library for Rust that supports reading and writing simple ZIP files. From 5.1.0 until 9.0.0, applications built with the legacy-zip feature can reserve output capacity from an attacker-controlled ZIP64 uncompressed size before validating the compressed stream. The ShrinkDecoder path ...
UBUNTU-CVE-2026-115907
zip is a zip library for Rust that supports reading and writing simple ZIP files. From 5.1.0 until 9.0.0, applications built with the legacy-zip feature can reserve output capacity from an attacker-controlled ZIP64 uncompressed size before validating the compressed stream. The ShrinkDecoder path ...
PT-2026-125118
A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment MICE service. An unauthenticated attacker with network access to the MICE service could consume available connection capacity, preventing legitimate users from establishing MICE-base...
EUVD-2026-105954
Vulnerability in the Oracle Capacity product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Capacity. Successful...