40562 matches found
The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to insufficient resource control during their existence. This allows attackers to trigger service failures.
The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to insufficient resource control during their existence. Exploiting these vulnerabilities can allow attackers who operate remotely to cause service failures...
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the SXP platform for managing Cisco Identity Services Engine policies allows a perpetrator to cause a service failure.
The vulnerability of the Cisco Identity Services Engine ISE policy management platform’s SXP service is related to improper elimination of special elements in data requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the DTLS protocol implementation in Cisco Secure Firewall Threat Defense (FTD) and Cisco Secure Firewall Adaptive Security Appliance (ASA) allows a attacker to induce a service failure.
The vulnerability of the DTLS protocol implemented by Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow a malicious...
ROS-20260923-73-0074
The vulnerability of the adjustinuseandcalccost function in the block/blk-iocost.c module, which is part of the Linux kernel’s block-level support, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to trigger a service failure...
ROS-20260923-73-0068
The vulnerability in the mm/kmsan/core.c and mm/kmsan/kmsantest.c modules of the Linux operating system relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-83600
Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized CHART SLOT value that str2ullencoded passes to pluginsdrrdsetcacheputtoslot in src/plugins.d/pluginsdinternals.h. The accepted slot drives reallocz to request an approximately 16 GiB...
CVE-2026-83600
The open source observability tool Netdata is vulnerable to a Denial of Service (DoS) condition prior to version 2.10.4 and nightly build 2.10.0-782-nightly . An authenticated child agent can send an oversized CHART SLOT value which is passed to pluginsd_rrdset_cache_put_to_slot in src/plugins.d/...
CVE-2026-94623
A flaw was found in vLLM. This denial of service vulnerability exists within the NIXL connector's prefix caching implementation. A remote attacker can exploit this by sending completion requests with multiple prompts of different lengths. This improper validation of block counts causes an asserti...
SUSE CVE-2026-90184
In the Linux kernel, the following vulnerability has been resolved: nullblk: serialize configfs attribute updates with device setup The attribute store methods generated with NULLBDEVICEATTR refuse to change the configuration of a live device by testing NULLBDEVFLCONFIGURED, but that flag is only...
SUSE CVE-2026-90406
In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: handle runtime PM resume failure in core deinit Check the return value of pmruntimeresumeandget in iriscoredeinit. If runtime PM resume fails, skip hardware power-off operations but still perform software...
SUSE CVE-2026-92520
In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a...
SUSE CVE-2026-93104
In the Linux kernel, the following vulnerability has been resolved: RDMA/rvt: Return NULL after port allocation failure rvtallocdevice deallocates the IB device when its port array cannot be allocated but then returns the pointer to the released allocation. Callers treat any non-NULL value as val...
DEBIAN-CVE-2026-63374
AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, connecttcp and TLSStream.wrap can validate internationalized host names after the standard library converts them with IDNA 2003 instead of IDNA 2008. When a...
ROS-20260922-73-0107
The vulnerability in the 389-ds-base relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260922-73-0010
The vulnerability in gstreamer1-plugins-good is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260922-73-0028
The vulnerability in gstreamer1-plugins-ugly is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260922-73-0114
The vulnerability in perl-Socket is related to reading beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...