Lucene search
+L

3922 matches found

Vulnrichment
Vulnrichment
added 2026/07/08 7:48 p.m.9 views

CVE-2026-58250 NATS Server: Pre-auth server crash via double INFO in leafnode handshake

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.12.8 and 2.11.17, an unauthenticated peer with network access to a leafnode listener with compression enabled could crash the server during the pre-authentication leafnode handshake by...

7.5CVSS6AI score0.00505EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/08 7:48 p.m.8 views

CVE-2026-58250 NATS Server: Pre-auth server crash via double INFO in leafnode handshake

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.12.8 and 2.11.17, an unauthenticated peer with network access to a leafnode listener with compression enabled could crash the server during the pre-authentication leafnode handshake by...

7.5CVSS6.1AI score0.00505EPSS
SaveExploits0References7
CVE
CVE
added 2026/07/08 7:42 p.m.17 views

CVE-2026-59803

The CVE-2026-59803 entry concerns rpcx (up to version 1.9.3) with a denial-of-service flaw in protocol.Message.Decode. When a message carries the compression flag, payloads are gzip-decompressed via util.Unzip without a decompressed-size limit; MaxMessageLength is checked only against the compres...

8.7CVSS6AI score0.00408EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/07/08 7:33 p.m.9 views

httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack

A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...

7.5CVSS7.1AI score0.27984EPSS
SaveExploits8References6
RedHat Linux
RedHat Linux
added 2026/07/08 5:58 p.m.6 views

httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack

A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...

7.5CVSS7.1AI score0.27984EPSS
SaveExploits8References6
Fedora
Fedora
added 2026/07/08 1:11 a.m.23 views

[SECURITY] Fedora 43 Update: python-cramjam-2.11.0-12.fc43

Thin Python bindings to de/compression algorithms in Rust...

5.9AI score
SaveExploits0
Fedora
Fedora
added 2026/07/08 12:58 a.m.20 views

[SECURITY] Fedora 44 Update: python-cramjam-2.11.0-12.fc44

Thin Python bindings to de/compression algorithms in Rust...

5.9AI score
SaveExploits0
Fedora
Fedora
added 2026/07/08 12:58 a.m.13 views

[SECURITY] Fedora 44 Update: python-fastar-0.11.0-7.fc44

The fastar library wraps the Rust tar, flate2, and zstd crates, providing a high-performance way to work with compressed and uncompressed tar archives in Python...

6AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/08 12:0 a.m.23 views

PT-2026-56563

Name of the Vulnerable Software and Affected Versions NATS Server versions prior to 2.12.8 NATS Server versions prior to 2.11.17 Description An unauthenticated peer with network access to a leafnode listener with compression enabled can cause the server to crash. This occurs during the...

7.5CVSS6.1AI score0.00505EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
added 2026/07/07 9:48 p.m.17 views

httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack

A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...

7.5CVSS7.1AI score0.27984EPSS
SaveExploits8References6
OSV
OSV
added 2026/07/07 4:52 p.m.8 views

GO-2026-5676 HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go...

7.5CVSS5.9AI score0.00367EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/07 4:41 p.m.8 views

GO-2026-5808 Incus has an argument injection in backup compression algorithm leading to AFW and ACE in github.com/lxc/incus

Incus has an argument injection in backup compression algorithm leading to AFW and ACE in github.com/lxc/incus...

5.9AI score
SaveExploits0References1
OSV
OSV
added 2026/07/07 11:45 a.m.5 views

PYSEC-2026-1484 JWCrypto vulnerable to JWT bomb Attack in `deserialize` function

Affected version Vendor: https://github.com/latchset/jwcrypto Version: 1.5.5 Description An attacker can cause a DoS attack by passing in a malicious JWE Token with a high compression ratio. When the server processes this Token, it will consume a lot of memory and processing time. Poc python from...

6.8CVSS6.5AI score0.0098EPSS
SaveExploits1References8
OSV
OSV
added 2026/07/07 11:45 a.m.5 views

PYSEC-2026-1424 Excessive Iteration in gRPC

gRPC contains a vulnerability that allows hpack table accounting errors could lead to unwanted disconnects between clients and servers in exceptional cases/ Three vectors were found that allow the following DOS attacks: - Unbounded memory buffering in the HPACK parser - Unbounded CPU consumption ...

7.5CVSS7.1AI score0.00412EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/06 9:3 a.m.9 views

EEF-CVE-2026-58226 Unauthenticated denial-of-service via unbounded HPACK integer decoding in hpax

Summary Inefficient Algorithmic Complexity vulnerability in elixir-mint hpax allows unauthenticated denial-of-service via unbounded HPACK integer decoding. hpax decodes HPACK variable-length integers with no upper bound on the decoded value or the number of continuation octets...

8.7CVSS6.1AI score0.00438EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/06 9:3 a.m.14 views

CVE-2026-58226

CVE-2026-58226 affects the hpax component of elixir-mint. The vulnerability is in Elixir.HPAX.Types:decode_remaining_integer/3 , which decodes HPACK integers without an upper bound, allowing an unauthenticated attacker to trigger excessive CPU and transient memory via a small HTTP/2 header block....

8.7CVSS6.1AI score0.00438EPSS
SaveExploits0References4
Fedora
Fedora
added 2026/07/04 1:7 a.m.59 views

[SECURITY] Fedora 43 Update: openvpn-2.6.21-1.fc43

OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for...

6AI score
SaveExploits0
Fedora
Fedora
added 2026/07/04 1:7 a.m.16 views

[SECURITY] Fedora 43 Update: 7zip-26.02-1.fc43

7-Zip is a file archiver with a high compression ratio. The main features of 7-Zip are: High compression ratio in 7z format with LZMA and LZMA2 compression Supported formats: Packing / unpacking: 7z, XZ, BZIP2, GZIP, TAR, ZIP and WIM Unpacking only: AR, ARJ, CAB, CHM, CPIO, CramFS, DMG, EXT, FAT,...

6AI score
SaveExploits0
Fedora
Fedora
added 2026/07/04 12:51 a.m.15 views

[SECURITY] Fedora 44 Update: openvpn-2.7.5-1.fc44

OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for...

6AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/07/03 1:43 p.m.5 views

haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions

A flaw was found in HAProxy. An attacker can trigger HPACK dynamic table insertions under memory pressure, leading to a null pointer dereference in the hpackdhtinsert function. This can cause HAProxy worker processes to crash, resulting in a denial of service DoS...

8.7CVSS6AI score0.00484EPSS
SaveExploits0References6
Rows per page
Query Builder