Lucene search
+L

22932 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/26 12:00 a.m.•1 views

CVE-2026-80206: Inefficient Regular Expression Complexity

NLTK before 3.10.3 contains a regular expression denial of service ReDoS vulnerability in the tgrep module. The tgrepnodeaction function compiles user-supplied regular expressions embedded in /regex/ pattern nodes and executes them via re.search against tree node labels without any validation or...

8.2CVSS5.9AI score0.0044EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-80205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept...

8.7CVSS5.8AI score0.00651EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•15 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098935)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098935 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation...

7CVSS5.8AI score0.00158EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•13 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104595)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104595 advisory. In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resume On Marvell MPIC platforms Armada 370/XP/38x,...

7.5CVSS5.5AI score0.00716EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/26 12:00 a.m.•0 views

CVE-2026-80205: Inefficient Regular Expression Complexity

NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept user-supplied regular expressions without validation or timeout. Attackers can supply crafted regex patterns that cause catastrophic backtracking,...

8.7CVSS5.8AI score0.00651EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•10 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104609)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104609 advisory. In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback errors cpuhpinvokecallback unwinds earlier callbacks...

7.8CVSS5.5AI score0.00176EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-77680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory...

5.3CVSS6.8AI score0.00684EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-80206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK before 3.10.3 contains a regular expression denial of service ReDoS vulnerability in the tgrep module. The tgrepnodeaction function compiles user-supplied...

8.2CVSS6.4AI score0.0044EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/08/26 12:00 a.m.•21 views

PT-2026-82080

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.3 Description The tgrep module contains a regular expression denial of service ReDoS issue. The tgrep node action function compiles user-supplied regular expressions within /regex/ pattern nodes and executes them...

8.2CVSS5.6AI score0.0044EPSS
SaveExploits1References19
NVD
NVD
•added 2026/08/25 9:17 p.m.•9 views

CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS0.00344EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/25 9:17 p.m.•12 views

DEBIAN-CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS6AI score0.00344EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/25 8:36 p.m.•43 views

CVE-2026-77680 Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fix

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS0.00344EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/25 8:36 p.m.•11 views

EUVD-2026-66111

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS6AI score0.00344EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/08/25 8:36 p.m.•10 views

CVE-2026-77680 Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fix

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS6AI score0.00344EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/08/25 8:36 p.m.•12 views

CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS6AI score0.00344EPSS
SaveExploits0
CVE
CVE
•added 2026/08/25 8:36 p.m.•25 views

CVE-2026-77680

libsoup contains an algorithmic complexity flaw in its HTTP Range header processing that persists after the CVE-2025-32907 fix. The root cause is that the coalescing loop in soup_message_headers_get_ranges_internal() uses g_array_remove_index() for each merged range, resulting in O(N²) work when ...

5.3CVSS6AI score0.00344EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/08/25 8:36 p.m.•10 views

CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS6.9AI score0.00684EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/25 7:43 p.m.•11 views

GO-2026-6254 Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoS in github.com/inspektor-gadget/inspektor-gadget

Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoS in github.com/inspektor-gadget/inspektor-gadget...

6.9CVSS5.7AI score0.00524EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/25 7:16 p.m.•15 views

CVE-2026-55620

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, emlparser.routing.noparenthesis in emlparser/routing.py removes parenthesized CFWS comments from Received: headers with a regex-based...

7.5CVSS0.0063EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
•added 2026/08/25 6:30 p.m.•10 views

Security Bulletin: Vulnerability in pgjdbc affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in pgjdbc has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerabilit...

7.5CVSS7.3AI score0.04117EPSS
SaveExploits0Affected Software2
Rows per page
Query Builder