4335 matches found
CVE-2026-30071: Allocation of Resources Without Limits or Throttling
An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30063
The free5gc v4.0.1 software contains a vulnerability in its NF Discovery endpoint . An attacker can trigger a Denial of Service (DoS) by sending a crafted snssais query . According to the Rapid7 documentation, the root cause is the allocation of resources without limits or throttling . Exploitati...
CVE-2026-38347
A heap overflow in the ffswsalphablendaway function libswscale/alphablend.c of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30058
Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30063
An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted snssais query...
PT-2026-82759
A Division-by-Zero vulnerability in the ff sws init single context function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-82535
An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
net/mail: golang: Go net/mail: Denial of Service via crafted email inputs
A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...
net/mail: golang: Go net/mail: Denial of Service via crafted email inputs
A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...
CVE-2025-10903
GitLab EE is affected by an unbounded loop (infinite loop) in the SCIM user provisioning feature , allowing an authenticated user to trigger a denial of service via specially crafted input. The vulnerability affects all versions from 11.10 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1...
CVE-2026-38754
A flaw was found in Busybox. This vulnerability, a heap overflow, exists within the ifsbreakup function. A remote attacker could exploit this by providing specially crafted input, leading to a Denial of Service DoS condition. This means the affected system or application could become unavailable ...
kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
A flaw was found in the Linux kernel's synaptics-rmi4 input driver. This vulnerability occurs because the driver incorrectly allocates memory for a keymap, leading to an out-of-bounds memory access. A local user with access to a specially crafted input device could exploit this to read or write t...
Linux Distros Unpatched Vulnerability : CVE-2026-68515
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: cairo (UTSA-2026-043397)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-043397 advisory. A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's...
MiracleLinux 8 : python-pyasn1-0.3.7-6.el8_10.2 (AXSA:2026-1657:04)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1657:04 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the...
EUVD-2026-65744
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, exrmultiview can write past a heap allocation when it combines two attacker-supplied,...
EUVD-2026-65734
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.12, the HTJ2K decoder parses a header-length field PLEN from a chunk's compressed data but never checks that this value fits within the...
CVE-2026-59186 OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, a crafted tiled EXR can trigger a heap out-of-bounds write on 32-bit/ILP32 builds when read...
CVE-2026-59186
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, a crafted tiled EXR can trigger a heap out-of-bounds write on 32-bit/ILP32 builds when read...
