23728 matches found
The vulnerability of the QEMU hardware emulation software, related to executing a loop with an unavailable exit condition, allows a hacker to trigger a service failure.
The vulnerability of the QEMU hardware emulation software is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a perpetrator to cause a service failure...
PT-2026-83119
Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping...
PT-2026-82894
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the ims-pcu driver during the parsing of CDC union descriptors within the ims pcu get cdc union desc function. The driver iterates through extra descriptor data without...
CVE-2026-80594: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing The driver parses CDC union descriptors in imspcugetcdcuniondesc by iterating through the extra descriptor data. However, it does not verify that the...
CVE-2026-13761: Unchecked Input for Loop Condition
Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping...
PT-2026-83367
Name of the Vulnerable Software and Affected Versions multer versions prior to 2.3.0 Description A denial of service issue exists in the middleware used for handling multipart/form-data in Node.js. A remote attacker can block the event loop by sending a multipart request containing two specially...
PT-2026-86709
In the Linux kernel, the following vulnerability has been resolved: igc: remove napi synchronize in igc down When an AF XDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igc clean rx irq zc then returns the full budget on every poll, so napi complete...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: apache-commons-compress (UTSA-2026-032264)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032264 advisory. When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to...
Linux Distros Unpatched Vulnerability : CVE-2026-80715
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - igc: remove napisynchronize in igcdown When an AFXDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igccleanrxirqzc...
CVE-2026-40019
An unauthenticated attacker can send a truncated quoted argument to the ManageSieve login process, which makes it spin in an infinite loop consuming CPU. This can cause degradation or denial of service for Sieve script management, and repeated connections can consume all available CPU on the...
UBUNTU-CVE-2026-40019
An unauthenticated attacker can send a truncated quoted argument to the ManageSieve login process, which makes it spin in an infinite loop consuming CPU. This can cause degradation or denial of service for Sieve script management, and repeated connections can consume all available CPU on the...
PT-2026-83061
Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.5-1.1 Description An unauthenticated attacker can cause a denial of service by sending a truncated quoted argument to the ManageSieve login process. This action triggers an infinite loop that consumes CPU resource...
CVE-2026-40019: Uncontrolled Resource Consumption
An unauthenticated attacker can send a truncated quoted argument to the ManageSieve login process, which makes it spin in an infinite loop consuming CPU. This can cause degradation or denial of service for Sieve script management, and repeated connections can consume all available CPU on the...
Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Genius Hub
Summary The following dependency packages are being used by IBM Db2 Genius Hub had vulnerabilties which were resolved. - fastapi, follow-redirects, dompurify, bn.js, elliptic, form-data, js-yaml, poetry, golang.org/x/text, transformers, qs, langchain, brace-expansion, echarts, golang.org/x/sys,...
CVE-2026-59317 In Spring for Apache Kafka, missing header validation in DeadLetterPublishingRecovererFactory enables denial of service via a poison-pill loop
DeadLetterPublishingRecovererFactory reads the retrytopic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new BigIntegerheader.value with no length or format validation. Spring for Apache Kafka 4.1.0 Spring for Apache Kafka 4.0.0 - 4.0.6 Spring for...
CVE-2026-59317 In Spring for Apache Kafka, missing header validation in DeadLetterPublishingRecovererFactory enables denial of service via a poison-pill loop
DeadLetterPublishingRecovererFactory reads the retrytopic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new BigIntegerheader.value with no length or format validation. Spring for Apache Kafka 4.1.0 Spring for Apache Kafka 4.0.0 - 4.0.6 Spring for...
CVE-2026-59317 In Spring for Apache Kafka, missing header validation in DeadLetterPublishingRecovererFactory enables denial of service via a poison-pill loop
DeadLetterPublishingRecovererFactory reads the retrytopic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new BigIntegerheader.value with no length or format validation. Spring for Apache Kafka 4.1.0 Spring for Apache Kafka 4.0.0 - 4.0.6 Spring for...
CVE-2026-59317
Spring for Apache Kafka is vulnerable to a denial of service via a poison-pill loop caused by missing header validation in DeadLetterPublishingRecovererFactory . The component reads the retry_topic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new B...
Security Bulletin: IBM SPSS Modeler is affected by a denial-of-service vulnerability in Netty
Summary IBM SPSS Modeler is affected by a denial-of-service vulnerability in Netty. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-59901 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and...
