401280 matches found
CLEANSTART-2026-UD61469 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230)
Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads CAPEC-230...
CLEANSTART-2026-DE60819 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197)
Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Exponential Data Expansion CAPEC-197...
CLEANSTART-2026-OO18479 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153)
Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153...
CLEANSTART-2026-WV62539 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted request that causes the server to construct and process a deeply nested data structure with n...
CVE-2026-103008 affects multiple packages. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially crafted request that causes the server to construct and process a deeply nested data structure with no bound on recursion depth. See references for individual...
CLEANSTART-2026-ME59410 If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape...
Security vulnerability affects the argo-cd package. If a trusted template author were to write a tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the block...
EUVD-2026-108556
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen on raw network data without ensuring a NUL terminator is present, causing it to read past the buffer into heap memory. This can result in a daemon crash, a 1-byte heap overwrite, or corruption of the...
CVE-2026-115485
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen on raw network data without ensuring a NUL terminator is present, causing it to read past the buffer into heap memory. This can result in a daemon crash, a 1-byte heap overwrite, or corruption of the...
PT-2026-135578
TuxCare rebuilt @babel/compat-data to address 2 CVEs. Fixed in 7.22.6-tuxcare.1...
PT-2026-135583
TuxCare rebuilt @babel/compat-data to address 1 CVE. Fixed in 7.12.5-tuxcare.2...
PT-2026-135595
TuxCare rebuilt @babel/compat-data to address 1 CVE. Fixed in 7.12.18-tuxcare.3...
PT-2026-122231
Name of the Vulnerable Software and Affected Versions langgraph-checkpoint-postgres versions prior to 3.1.3 langgraph-checkpoint-sqlite versions prior to 3.1.2 Description PostgresStore, AsyncPostgresStore, SqliteStore, and AsyncSqliteStore flatten namespace labels using ".".joinnamespace, which...
PT-2026-121753
Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated API users to bypass the configured maximum attachment file size by uploading attachments through the API using base64-encoded file data. The application enforces...
PT-2026-135160
Security vulnerability affects the sonarqube package. Reachable Assertion CWE-617 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153...
CVE-2025-30047: Deserialization of Untrusted Data
CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this...
PT-2026-135582
TuxCare rebuilt @babel/compat-data to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
PT-2026-135586
TuxCare rebuilt @babel/compat-data to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
PT-2026-122421
Summary The Postgres and SQLite stores save a namespace as its labels joined with ., so "tenant", "bob" and "tenant.bob", map to the same stored namespace. put rejected labels containing ., but get, search, delete, list namespaces, their async versions, and ops passed directly to batch/abatch did...
PT-2026-121987
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Bluetooth RFCOMM implementation. The rfcomm recv data function passes a socket buffer skb to the d-data ready callback. While the tty implementation correctly...
PT-2026-121923
In the Linux kernel, the following vulnerability has been resolved: riscv: ptrace: Zero-initialize regset buffers before copyin user regset copyin only copies count bytes, so a PTRACE SETREGSET request with a short iov len leaves the rest of the stack buffer uninitialized. In riscv vr set that...