EUVD-2026-38462

n8n is an open source workflow automation platform. Prior to 2.24.0, the Compression node's Decompress operation expanded attacker-controlled archives into memory without enforcing limits on decompressed output size. An unauthenticated attacker could send a small compressed archive to a public...

EUVD-2023-60596

Traefik before 2.10.5 and 3.0.0-beta4 is affected by a denial-of-service vulnerability in HTTP/2 request handling inherited from the Go standard library's HTTP/2 implementation CVE-2023-44487 / CVE-2023-39325, the 'Rapid Reset' technique. A remote attacker can rapidly create and cancel HTTP/2...

The vulnerability in the web interface for managing microprogrammed software routers UTT HiPER 1250GW allows a hacker to trigger a service failure.

The vulnerability of the web-based management interface for UTT HiPER 1250GW microprogramming software is related to buffer overflow in the stack when processing the Profile parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the web interface for managing micro-program software-based network devices UTT 1200GW allows a perpetrator to cause a service failure.

The vulnerability of the web-based interface for managing microprogrammed network devices UTT 1200GW is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PT-2026-51471

Name of the Vulnerable Software and Affected Versions OpenSSH affected versions not specified Description A double free flaw exists in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client...

The vulnerability in the web interface for managing microprogrammed network devices UTT 1200GW allows a perpetrator to cause a service failure.

The vulnerability in the web interface for managing microprogrammed network devices UTT 1200GW is related to the data being written beyond the buffer boundaries in memory when processing the sysAdmUser/sysAdmPass parameter. Exploitation of this vulnerability could allow a malicious actor to cause...

ROS-20260623-73-0052

The vulnerability in Wireshark is related to improper management of sequential memory distribution. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260623-73-0049

The vulnerability of the pgAdmin 4 database management tool is related to the lack of measures taken to neutralize special elements in LDAP requests. Exploiting this vulnerability allows a malicious actor to cause service failures by entering special LDAP symbols in the username...

ROS-20260623-73-0036

Vulnerability in Python 3.9 related to insufficient input validation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability in the web interface for managing microprogrammed software routers UTT HiPER 1250GW allows a hacker to trigger a service failure.

The vulnerability of the web-based management interface for UTT HiPER 1250GW microprogramming software is related to buffer overflow in the stack when processing the Profile parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

etcd: etcd: Authorization bypass allows information disclosure and denial of service

A flaw was found in etcd, a distributed key-value store. Unauthorized users can bypass authentication or authorization checks when the gRPC API is exposed to untrusted clients. This allows them to access sensitive cluster topology information, disrupt operations through alarms, interfere with lea...

httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack

A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...

CVE-2026-6673 Mattermost Jira plugin had unauthenticated {{/ac/installed}} lifecycle callback during pending Jira Cloud install

Mattermost versions 11.7.x = 11.7.0, 11.6.x = 11.6.2, 11.5.x = 11.5.5, 10.11.x = 10.11.17 fail to authenticate Atlassian Connect installed callbacks, allowing a remote unauthenticated attacker to inject a rogue sharedSecret and disrupt the Jira integration via POST to /ac/installed during the...

kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA Internet Wide Area RDMA Protocol iWARP subsystem. Incorrect work submission logic in the iwcm component can lead to multiple queueing of work items. This allows a work item to be processed and freed while still present in the...

CVE-2026-47262

containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service DoS condition. When creating a container from this image, memory exhaustion occurs, leading to an...

The vulnerability of the fromSafeMacFilter() function (/goform/SafeMacFilter) in the Tenda F453 router software allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the fromSafeMacFilter function /goform/SafeMacFilter of the Tenda F453 router microprogramming system is caused by buffer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the calipso_skbuff_setattr() function in the net/ipv6/calipso.c module of the Linux operating system’s IPv6 kernel implementation allows a malicious actor to trigger a service failure remotely.

The vulnerability of the calipsoskbuffsetattr function in the net/ipv6/calipso.c module of the Linux operating system’s IPv6 kernel implementation is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Vulnerability of the fromSafeUrlFilter() function (/goform/SafeUrlFilter) in the httpd daemon’s microprogramming router Tenda F453, allowing a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the fromSafeUrlFilter function /goform/SafeUrlFilter in the Tenda F453 router microprogramming software is caused by buffer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures remotely...

Vulnerability of .NET, ASP.NET, and Microsoft Visual Studio software platforms, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of .NET, ASP.NET, and Microsoft Visual Studio programs is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Vulnerability of the formWrlsafeset() function (/goform/AdvSetWrlsafeset): This function in the httpd daemon’s microprogramming software for Tenda F453 allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the formWrlsafeset function /goform/AdvSetWrlsafeset in the httpd daemon’s microprogramming router Tenda F453 is related to the issue of operations going beyond the buffer boundaries in memory when processing the mitssidindex parameter. Exploiting this vulnerability could all...