180 matches found
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the FileBufferingReadStream process. An attacker can cause memory exhaustion and disrupt service availability by sending specially crafted multipart requests that trigger excessiv...
Allocation of Resources Without Limits or Throttling
Overview Microsoft.AspNetCore.App.Runtime.win-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling...
Allocation of Resources Without Limits or Throttling
Overview Microsoft.AspNetCore.App.Runtime.win-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling vi...
EUVD-2026-95800
A missing authorization check in the illumos zones statistics daemon zonestatd allows a local user in any zone to disrupt zonestat in other zones and to determine which zones are running. The zonestatd door server procedure, zsdserver in usr/src/cmd/zonestat/zonestatd/zonestatd.c, handles the...
Improper Handling of Exceptional Conditions
Overview org.apache.thrift:libthrift is a lightweight, language-independent software stack with an associated code generation mechanism for point-to-point RPC. Affected versions of this package are vulnerable to Improper Handling of Exceptional Conditions due to improper handling of exceptional...
CVE-2026-102125
The sandbox that isolates document conversion on a Kiteworks appliance did not fully confine the code running inside it. Code already executing within that sandbox could potentially escape its confinement and act with the privileges of the service account that runs the application, which could...
openjdk: Improve DTLS handshaking (Oracle CPU 2026-07)
A flaw was found in OpenJDK. The DTLS implementation is open to two different DoS attacks...
HTTP Request Smuggling
Overview @sap/approuter is a Node.js based application router Affected versions of this package are vulnerable to HTTP Request Smuggling via the HTTP request handling process. An attacker can gain unauthorized access to sensitive information and disrupt service availability by sending specially...
IBM HTTP Server Buffer Overflow DoS
The vulnerability of the IBM HTTP Server is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...
CVE-2026-4064
Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with any valid token to bypass role-based access controls and perform privileged operations — including reading sensitive data, creating or deleting resources, and...
PT-2026-6087
Name of the Vulnerable Software and Affected Versions Citrix Emergency Sharing versions prior to SMR Feb-2026 Release 1 Description An improper access control issue exists in Emergency Sharing. This allows local attackers to interrupt the functionality of the service. Recommendations Update to SM...
EUVD-2022-41578
Malicious code in bioql PyPI...
EUVD-2022-36032
Malicious code in bioql PyPI...
EUVD-2023-28827
Malicious code in bioql PyPI...
EUVD-2023-32340
Malicious code in bioql PyPI...
EUVD-2023-42972
Malicious code in bioql PyPI...
EUVD-2022-40721
Malicious code in bioql PyPI...
EUVD-2022-38110
Malicious code in bioql PyPI...