EUVD-2026-56409

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-62901

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Thrift

Summary Multiple vulnerabilities in Apache Thrift that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2018-11798 DESCRIPTION: The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security...

.NET Denial of Service Vulnerability

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-72522

A flaw in libexpat's toUtf16 functions mishandles Unicode low surrogates by treating them as high surrogates. An attacker can exploit the resulting out-of-bounds read to trigger an infinite loop, causing a denial of service DoS. Mitigation Limit exposure by restricting the parsing of untrusted or...

CVE-2026-68313

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC module. A vulnerability in the tipcnlcompatdumpit function can lead to an infinite loop if a callback returns a negative error code. This prevents the release of a critical system lock, causing other processes to...

tipc: fix infinite loop in __tipc_nl_compat_dumpit

...

usb: gadget: printer: fix infinite loop in printer_read()

...

libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.

...

tar: Node-tar: Denial of Service via malformed tar archive header

A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop,...

brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...

SUSE CVE-2026-46385

iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, the Avro array and map decoders looped over an attacker-controlled block-count value without checking the underlying reader's error state inside the loop body. Reader.ReadBlockHeader returns the count as a Go int, which is 64-bit on amd64 ...

CVE-2026-62901: Unchecked Input for Loop Condition

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-70826

Name of the Vulnerable Software and Affected Versions Nmap versions prior to 8.0 Description A denial of service issue allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. This malformed packet triggers the Packet:parse options function...

PT-2026-70786

Name of the Vulnerable Software and Affected Versions Browserslist versions prior to 4.28.7 Description The normalizeStats function in node.js, which is called via getStat and loadStat during every browserslist execution, improperly processes data from browserslist-stats.json, opts.stats, and the...

CVE-2026-62901

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-70593

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An issue exists where unchecked input for a loop condition allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the moment, there is no information abo...

brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...

CVE-2026-67213

A flaw was found in nanoid Nano ID, a small, secure, and URL-friendly unique string ID generator. An attacker could exploit this vulnerability by providing a zero-size input to the customAlphabet or customRandom functions. This would cause an infinite loop, leading to a denial of service DoS...

SUSE CVE-2026-67213

nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...