Lucene search
+L

23680 matches found

BDU FSTEC
BDU FSTEC
•added 2026/09/04 12:00 a.m.•8 views

The vulnerability of the ttm_bo_shrink() function in the drivers/gpu/drm/ttm/ttm_b_util.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ttmboshrink function in the drivers/gpu/drm/ttm/ttmboutil.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this vulnerability could...

5.5CVSS6.4AI score0.00143EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/09/04 12:00 a.m.•8 views

The vulnerability of the tmigrhandle_remote_cpu() function in the kernel/time/timer_migration.c module of the Linux kernel’s timer subsystem allows a hacker to cause a service failure.

The vulnerability of the tmigrhandleremotecpu function in the kernel/time/timermigration.c module of the Linux kernel’s timer subsystem is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow a remote attacker to cause a...

7.8CVSS6.5AI score0.0034EPSS
SaveExploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/09/04 12:00 a.m.•10 views

The vulnerability of the sixpack_receive_buf() function in the drivers/net/hamradio/6pack.c module of the network device driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sixpackreceivebuf function in the drivers/net/hamradio/6pack.c module of the Linux kernel’s network device driver is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow a remote attacker to cause...

5.7CVSS6.3AI score0.00162EPSS
SaveExploits0References14Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/09/04 12:00 a.m.•6 views

The vulnerability of the `virtio_gpu_dma_fence_wait()` function in the `drivers/gpu/drm/virtio/virtgpu_submit.c` file of the Direct Rendering Infrastructure (DRI) driver of the Linux operating system allows a malicious actor to trigger a service failure.

The vulnerability of the virtiogpudmafencewait function in the drivers/gpu/drm/virtio/virtgpusubmit.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this...

5.7CVSS6.3AI score0.00122EPSS
SaveExploits0References12Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/09/04 12:00 a.m.•10 views

The vulnerability of the Python library for working with PDF files, PyPDF, relates to the execution of a loop with an unreachable exit condition, allowing a hacker to cause a service failure.

The vulnerability of the Python library for working with PDF files, PyPDF, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00174EPSS
SaveExploits0References8Affected Software5
Tenable Nessus
Tenable Nessus
•added 2026/09/04 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-80790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-fc: fix invalid free in LS IOD error path nvmetfcalloclsiodlist advances iod while initializing the LS IOD array. If an rqstbuf allocation or response...

6.3AI score0.00243EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/04 12:00 a.m.•8 views

CVE-2026-78543: Loop with Unreachable Exit Condition

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to cause a denial of service due to an infinite loop...

7.5CVSS5.9AI score0.00549EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/09/03 8:46 p.m.•20 views

CVE-2026-71429

A flaw was found in stream-json. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted, deeply nested JSON document. The library's path filters, such as pick and ignore, inefficiently process these structures, leading to excessive resource...

6.2CVSS6.5AI score0.0016EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2026/09/03 8:27 p.m.•13 views

NPM: stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)

NPM: stream-json: pick/ignore/filter/replace filters are Odepth² on nested input — small crafted JSON blocks the event loop for seconds→minutes DoS vulnerability discovered by ? in WordPress Npm stream-json versions = 3.4.0...

6.2CVSS6.5AI score0.0016EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/03 8:27 p.m.•21 views

stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)

Description The path filters pick, ignore, filter, and replace — the library's headline "surgical extraction" feature — recompute the full path string from the nesting stack on every checkable token. Because the stack length equals the current nesting depth, and a checkable token is emitted at...

6.2CVSS6.5AI score0.0016EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2026/09/03 8:15 p.m.•26 views

CVE-2026-71429 stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.5.0, the path filters pick, ignore, filter, and replace in src/core/filters/filter-base.js recompute the full path string from the nesting stack for every checkable token...

6.2CVSS6AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/03 8:15 p.m.•41 views

CVE-2026-71429 stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.5.0, the path filters pick, ignore, filter, and replace in src/core/filters/filter-base.js recompute the full path string from the nesting stack for every checkable token...

6.2CVSS0.0016EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/03 8:15 p.m.•18 views

EUVD-2026-70733

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.5.0, the path filters pick, ignore, filter, and replace in src/core/filters/filter-base.js recompute the full path string from the nesting stack for every checkable token...

6.2CVSS6.5AI score0.0016EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/03 8:15 p.m.•14 views

CVE-2026-71429 stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.5.0, the path filters pick, ignore, filter, and replace in src/core/filters/filter-base.js recompute the full path string from the nesting stack for every checkable token...

6.2CVSS6.5AI score0.0016EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/03 8:15 p.m.•27 views

CVE-2026-71429

stream-json , a micro-library for streaming JSON/JSONC processing, has a denial-of-service vulnerability in its path filters (pick, ignore, filter, replace) defined in src/core/filters/filter-base.js. Prior to 3.5.0 , these filters recompute the full path string from the nesting stack for every c...

6.2CVSS6.5AI score0.0016EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/03 5:45 p.m.•15 views

GHSA-M7FP-H3P4-HR49 LiquidJS has an infinite loop vulnerability in its `strip_html` filter

Summary The current implementation of striphtml can cause an infinite loop when the input string contains appears after ' as the catch-all kind; a regex // equivalent is On^2 in V8 on unclosed openers. export function striphtml this: FilterImpl, v: string const str = stringifyv...

8.7CVSS5.9AI score0.00524EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/03 5:45 p.m.•23 views

EUVD-2026-63089

LiquidJS has an infinite loop vulnerability in its striphtml filter...

8.7CVSS5.9AI score0.00524EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2026/09/03 5:45 p.m.•11 views

NPM: LiquidJS has an infinite loop vulnerability in its `strip_html` filter

NPM: LiquidJS has an infinite loop vulnerability in its striphtml filter discovered by ? in WordPress Npm liquidjs versions = 10.26.0, 10.27.1...

8.7CVSS5.9AI score0.00524EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/03 5:45 p.m.•35 views

LiquidJS has an infinite loop vulnerability in its `strip_html` filter

Summary The current implementation of striphtml can cause an infinite loop when the input string contains appears after ' as the catch-all kind; a regex // equivalent is On^2 in V8 on unclosed openers. export function striphtml this: FilterImpl, v: string const str = stringifyv...

8.7CVSS5.9AI score0.00524EPSS
SaveExploits0References6Affected Software1
SUSE CVE
SUSE CVE
•added 2026/09/03 4:25 p.m.•19 views

SUSE CVE-2026-80740

In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix infinite loop when scale is too large for display When scale is large enough that scaledfont exceeds the display dimensions, rows or columns become 0. A columns value of 0 causes an infinite loop in...

6AI score0.00206EPSS
SaveExploits0References3
Rows per page
Query Builder