25025 matches found
CVE-2026-33079
A flaw was found in Mistune, a Markdown parser. This vulnerability, known as Regular Expression Denial of Service ReDoS, exists in the LINKTITLERE regular expression. A remote attacker can exploit this by providing specially crafted Markdown input, which causes the regular expression engine to...
CVE-2026-40016
A flaw was found in Dovecot. A remote or local attacker could upload a malicious Sieve script through the ManageSieve service, or locally, to bypass configured CPU time limits for Sieve scripts. This allows the attacker to consume excessive server resources, leading to a degradation of server...
Linux Distros Unpatched Vulnerability : CVE-2026-39829
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could...
CVE-2026-47066: Loop with Unreachable Exit Condition
Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in benoitc hackney allows Excessive Allocation. The Alt-Svc response header parser in src/hackneyaltsvc.erl does not guarantee forward progress. When parsetoken/2 receives a non-token, non-whitespace, non-comma byte e.g. !, @, =, ...
PT-2026-43064
Name of the Vulnerable Software and Affected Versions hackney versions 2.0.0-beta.1 through 4.0.0 Description An infinite loop exists in the Alt-Svc response header parser within src/hackney altsvc.erl. When the parse token/2 function receives a byte that is not a token, whitespace, or comma such...
Alibaba Cloud Linux 3 : 0115: jq (ALINUX3-SA-2026:0115)
The remote Alibaba Cloud Linux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0115 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-39979: A flaw was found in jq, a...
PT-2026-42860
Name of the Vulnerable Software and Affected Versions Parse Server affected versions not specified Description An unauthenticated attacker with knowledge of a public Parse Application ID can cause a denial of service by submitting a single HTTP request to any '/parse/' endpoint. The attack involv...
Inefficient Algorithmic Complexity
Overview golang.org/x/net/html is a package that implements an HTML5-compliant tokenizer and parser. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in parse.go, when checking attributes iteratively. An attacker can cause excessive CPU consumption by providi...
AZL-87570 CVE-2026-25680 affecting package cri-tools for versions less than 1.32.0-6
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-88200 CVE-2026-25680 affecting package packer for versions less than 1.9.5-15
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87903 CVE-2026-25680 affecting package kubernetes for versions less than 1.30.10-25
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87756 CVE-2026-25680 affecting package gh for versions less than 2.62.0-17
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87888 CVE-2026-25680 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87459 CVE-2026-25680 affecting package cf-cli for versions less than 8.7.11-7
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87813 CVE-2026-25680 affecting package influxdb for versions less than 2.7.5-17
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87287 CVE-2026-25680 affecting package podman 5.6.1-10
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87537 CVE-2026-25680 affecting package containerd2 for versions less than 2.2.4-4
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-88098 CVE-2026-25680 affecting package multus for versions less than 4.0.2-9
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...