Lucene search
+L

12023 matches found

Snyk
Snyk
added 2026/08/03 5:50 a.m.9 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the toByteArray method of DefiniteLengthInputStream, which allocates new byteintremaining up front from the declared ASN.1 definite-length value before reading any content. An attacker can...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/03 1:16 a.m.5 views

DEBIAN-CVE-2026-59645

In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcutil-fips 2.0.7 2.0.X series and 2.1.7 2.1.X series...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/03 12:49 a.m.59 views

CVE-2026-59645

CVE-2026-59645 affects Bouncy Castle for Java where the OER parser recurses without a depth limit on a self-referential IEEE 1609.2 schema. Affected products/versions include Java edition before 1.85, Java LTS before 2.73.12, and BC-FJA (Java FIPS) before bcutil-fips 2.0.7 (2.0.x series) and 2.1....

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/03 12:49 a.m.6 views

CVE-2026-59645 OER parser recurses without depth limit on self-referential IEEE 1609.2 schema

In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcutil-fips 2.0.7 2.0.X series and 2.1.7 2.1.X series...

8.7CVSS5.5AI score
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2026/08/03 12:49 a.m.6 views

CVE-2026-59645 OER parser recurses without depth limit on self-referential IEEE 1609.2 schema

In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcutil-fips 2.0.7 2.0.X series and 2.1.7 2.1.X series...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/03 12:0 a.m.5 views

CVE-2026-38446

A stored cross-site scripting XSS vulnerability exists in osTicket 1.18.3 due to improper sanitization of the thread entry title field. User-controlled input in the title is stored without adequate HTML escaping and later rendered in multiple staff-facing templates without proper output encoding...

5.4AI score0.00248EPSS
SaveExploits1References5
CVE
CVE
added 2026/08/03 12:0 a.m.22 views

CVE-2026-38446

Summary of CVE-2026-38446 : The vulnerability exists in osTicket 1.18.3 due to improper sanitization of the thread entry title field. User-controlled input in the title is stored without adequate HTML escaping and later rendered in multiple staff-facing templates without proper output encoding. T...

6.1CVSS5.4AI score0.00248EPSS
SaveExploits1References5
NVD
NVD
added 2026/08/01 7:16 p.m.11 views

CVE-2026-55733

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.toatom/1. When encode/3 in...

7.5CVSS0.00271EPSS
SaveExploits1References4
EUVD
EUVD
added 2026/08/01 6:46 p.m.11 views

EUVD-2026-51917

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian Guardian.Permissions module allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines...

6.9CVSS5.5AI score0.00286EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/08/01 6:46 p.m.43 views

CVE-2026-55733 Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.toatom/1. When encode/3 in...

6.9CVSS0.00271EPSS
SaveExploits1References4
CVE
CVE
added 2026/08/01 6:46 p.m.39 views

CVE-2026-55733

The CVE details a denial-of-service in ueberauth guardian via Guardian.Permissions.AtomEncoding: attacker-controlled binary input fed into encode/3 leads to String.to_atom/1 creating unlimited atoms, exhausting BEAM’s atom table (≈1,048,576 entries) and crashing the node. Affected versions: guard...

7.5CVSS5.6AI score0.00271EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2026/08/01 6:46 p.m.6 views

CVE-2026-55733 Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.toatom/1. When encode/3 in...

6.9CVSS5.6AI score0.00271EPSS
SaveExploits1References9
EUVD
EUVD
added 2026/08/01 6:46 p.m.12 views

EUVD-2026-51916

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.toatom/1. When encode/3 in...

6.9CVSS5.6AI score0.00271EPSS
SaveExploits1References4
OSV
OSV
added 2026/08/01 1:16 p.m.4 views

UBUNTU-CVE-2026-67297

FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...

8.7CVSS5.5AI score0.00343EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/01 12:22 p.m.35 views

CVE-2026-67306

CVE-2026-67306 describes an out-of-bounds read in FreeRDP up to version 3.28.0 when decoding planar RLE bitmaps in libfreerdp/codec/planar.c (planar_decompress_plane_rle and planar_decompress_plane_rle_only). The 1-byte control byte is checked, but the following 0–15 attacker-declared raw bytes a...

5.4CVSS5.6AI score0.00277EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/01 12:22 p.m.34 views

CVE-2026-67319 axios before 0.33.0 Prototype Pollution via nested option objects

axios before 0.33.0 and 1.x before 1.18.0 can consume inherited properties from nested request option objects when the JavaScript process's Object.prototype has already been polluted by another component. While the top-level merged config uses a null prototype, nested plain objects such as auth a...

6.3CVSS0.00258EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/01 12:22 p.m.32 views

CVE-2026-67297 FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response

FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...

8.7CVSS0.00343EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/01 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-64607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or...

5.3CVSS5.5AI score0.00238EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/31 7:3 p.m.6 views

GHSA-CJ54-HPCC-GJ6H Thumbor has path traversal via post-validation URL decoding bypass in file_loader

The fileloader performs unquote on the file path AFTER the abspath + startswith security check. An attacker can use percent-encoded path traversal sequences %2e%2e for .. that pass the security check as literal directory names, but are then decoded to actual .. traversal sequences. Affected code...

8.7CVSS5.5AI score0.00357EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/07/31 7:3 p.m.10 views

CVE-2026-53502

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, fileloader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILELOADERROOTPATH through watermark or frame filter input. This issue is fixed in 7.8.0...

8.7CVSS5.5AI score0.00357EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder