PT-2026-111740

Name of the Vulnerable Software and Affected Versions Grafana affected versions not specified Description Authenticated users can cause the server to crash due to out-of-memory conditions. This occurs because the Prometheus rule conversion API endpoints do not limit the request body size, enablin...

Unbounded memory allocation in the Prometheus rule conversion API

The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions...

CVE-2026-33374: Allocation of Resources Without Limits or Throttling

The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions...

EUVD-2021-10852

Malware in sbrugna...

CVE-2021-23930

OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile...

Adobe Acrobat ImageConversion.api Heap Buffer Overflow Information Disclosure

The vulnerability of the ImageConversion.api file in programs for viewing and editing PDF files in Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader Document Cloud 2017 is related to reading data outside of the buffer in memory...

CVE-2021-23930

OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile...

Design/Logic Flaw

OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile...

CVE-2021-23930

OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile...

CVE-2021-23930

OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile...

CVE-2021-23930

CVE-2021-23930 affects OX App Suite up to version 7.10.4, with an XSS vulnerability exploitable via the transformation/conversion API used for a distributedFile. The connected records corroborate the issue across multiple feeds (Red Hat, CNVD, NVD, etc.). The provided documents do not specify an ...

CVE-2021-23930: Improper Neutralization of Input During Web Page Generation

OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile...

PT-2021-15616

Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.4 and earlier Description: The issue allows for cross-site scripting XSS via the use of the conversion API for a distributedFile. This can potentially lead to malicious script execution on the client-side...