502 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-105399
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a denial of service vulnerability in the MVG decoder caused by a missing limit check. Attackers ca...
EUVD-2026-95003
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a denial of service vulnerability in the MVG decoder caused by a missing limit check. Attackers can supply a crafted MVG image that triggers a long-running decoding operation, consuming excessive CPU resources and stalling image...
Ubuntu 22.04 LTS / 24.04 LTS : FreeType vulnerability (USN-8881-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8881-1 advisory. It was discovered that FreeType had a flaw in its CID font loader. An attacker could possibly use this issue to cause FreeType to consume excessive...
USN-8881-1 freetype vulnerability
It was discovered that FreeType had a flaw in its CID font loader. An attacker could possibly use this issue to cause FreeType to consume excessive memory and CPU resources, leading to a denial of service...
CVE-2026-77387
A flaw was found in geopy. An attacker can cause a Denial of Service DoS by supplying excessively long or malformed coordinate strings to coordinate parsing functions such as Point.fromstring or reverse geocoding methods. Due to inefficient regular expression evaluation on unvalidated input,...
USN-8861-1: OpenSSL vulnerabilities
It was discovered that OpenSSL had an inefficient algorithm in its QUIC stream reassembly implementation. A remote attacker could possibly use this issue to cause OpenSSL to use excessive CPU resources, leading to a denial of service. CVE-2026-42772 It was discovered that OpenSSL did not properly...
python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations
A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit CPU resources. This leads to...
Infinite loop
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Infinite loop through the POST /api/v1/folders/id/update/parent handler, which allows a folder to be moved under itself or one of its subfolders, creating a cycle in the folder hierarchy. An attacker can caus...
CVE-2026-81687
opensslencrypt versions before 1.4.9 fail to enforce a time ceiling on key derivation function iteration counts specified in file metadata. Attackers can craft files with extremely high KDF iteration counts to consume CPU resources for unbounded periods before password verification occurs...
tar: node-tar: Denial of Service via crafted gzip bomb
A flaw was found in node-tar, a tar archive manipulation library for Node.js. This vulnerability allows a remote attacker to craft a small gzip bomb, which, when processed, can lead to the exhaustion of disk space and CPU resources. This occurs because node-tar does not enforce strict limits on t...
EUVD-2019-13790
Malware in sbrugna...
EUVD-2019-13687
Malware in sbrugna...
EUVD-2017-13002
Malware in sbrugna...
EUVD-2021-14794
Malware in sbrugna...
EUVD-2016-0289
Malware in sbrugna...
EUVD-2018-0756
Malware in sbrugna...
EUVD-2020-4321
Malware in sbrugna...
EUVD-2024-2200
Malicious code in bioql PyPI...