ROS-20260908-73-0089

The vulnerability in golang-x-image is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dma_resv_get_fences() function in the drivers/dma-buf/dma-resv.c module of the Linux operating system, which allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dmaresvgetfences function in the drivers/dma-buf/dma-resv.c module of the Linux operating system is related to the execution of a loop without sufficient limitation on its execution count. Exploiting this vulnerability could allow an attacker to compromise the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: apache-commons-fileupload (UTSA-2025-279266)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-279266 advisory. Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons...

EUVD-2025-18407

Malicious code in bioql PyPI...

The vulnerability of the microprogrammed industrial digital gas analyzer MEAC300-FNADE4 lies in the insufficient limitation on authentication attempts, allowing a perpetrator to execute a brute-force attack.

The vulnerability of the microprogrammed industrial digital gas analyzer MEAC300-FNADE4 is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to carry out a brute-force attack...

apache-commons-fileupload: Apache Commons FileUpload DoS via part headers

A denial-of-service DoS vulnerability has been discovered in the Apache Commons FileUpload library. The flaw stems from insufficient limits placed on multipart headers during file uploads. A remote attacker could exploit this by sending a specially crafted request with an excessively large number...

OESA-2025-1706 apache-commons-fileupload security update

The javax.servlet package lacks support for RFC-1867, HTML file upload. This package provides a simple to use API for working with such data. The scope of this package is to create a package of Java utility classes to read multipart/form-data within a javax.servlet.http.HttpServletRequest. Securi...

SUSE CVE-2025-48976

Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4. Users are recommended to upgrade to versions 1.6 or 2.0.0-M4, which fi...

CVE-2025-48976: Allocation of Resources Without Limits or Throttling

Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4. Users are recommended to upgrade to versions 1.6 or 2.0.0-M4, which fi...

The vulnerability of the AVerCaster video encoding device lies in its insufficient attempt-limiting mechanism, which allows attackers to execute a brute-force attack.

The vulnerability of the AVerCaster video encoding device is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a remote attacker to execute an attack using brute-force methods...

Insufficient limits of CNAME resolution in resolver

Insufficient limits of CNAME resolution in resolver Severity: medium CVE-2016-0747 Not vulnerable: 1.9.10+, 1.8.1+ Vulnerable: 0.6.18-1.9.9...