24493 matches found
CVE-2026-59203 Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service
Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive, allowing a crafted EPS file to cause Image.open to seek backwards to the same directive and parse it repeatedly in an infinite...
Security Bulletin: IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service (CVE-2026-7771)
Summary IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service. Vulnerability Details CVEID:CVE-2026-7771 DESCRIPTION: IBM Db2 is vulnerable to a trap when compiling a specially crafted statements containing subqueries...
Active Directory Federation Server Denial of Service Vulnerability
Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
Windows Active Directory Denial of Service Vulnerability
Loop with unreachable exit condition 'infinite loop' in Windows Active Directory allows an unauthorized attacker to deny service over a network...
Windows Active Directory Federation Services Denial of Service Vulnerability
Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
Azure Active Directory Denial of Service Vulnerability
Loop with unreachable exit condition 'infinite loop' in Azure Active Directory allows an unauthorized attacker to deny service over a network...
Malicious code in postcss-animatecss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfcae16a606f0b7eccb6cd94c1d1d0b583b19021bb15d04161f3ca8855aba61 The exported PostCSS plugin factory in [email protected] contains an obfuscator.io-obfuscated payload that executes on every consumer build...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS due to improper timeout management during network read operations in the receive loop. An attacker can cause the application to become unresponsive or crash by sending specially crafted network packets. Details...
PT-2026-58226
Loop with unreachable exit condition 'infinite loop' in Windows Active Directory allows an unauthorized attacker to deny service over a network...
PT-2026-64455
wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a Machine-in-the-Middle MITM position. The root cause is that the client module accepts TLS messages that normally are only sent to TLS servers...
EulerOS 2.0 SP10 : expat (EulerOS-SA-2026-2687)
According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted X...
PT-2026-58483
Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An infinite loop occurs due to an unreachable exit condition, which allows an unauthorized attacker to cause a denial of service over a network. Recommendations A...
CVE-2026-54119: Loop with Unreachable Exit Condition
Loop with unreachable exit condition 'infinite loop' in Windows Active Directory allows an unauthorized attacker to deny service over a network...
CVE-2026-50647: Loop with Unreachable Exit Condition
Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-50653: Loop with Unreachable Exit Condition
Loop with unreachable exit condition 'infinite loop' in Azure Active Directory allows an unauthorized attacker to deny service over a network...
CVE-2026-50324: Loop with Unreachable Exit Condition
Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-59203: Loop with Unreachable Exit Condition
Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive, allowing a crafted EPS file to cause Image.open to seek backwards to the same directive and parse it repeatedly in an infinite...
PT-2026-58925
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.9.1 and 8.6.82, deeply nested $or, $and, and $nor query condition operators in the REST API or LiveQuery query handling could trigger exponential-time processing in the internal...
PT-2026-58316
Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An infinite loop occurs due to an unreachable exit condition, which allows an unauthorized attacker to cause a denial of service over a network. Recommendations A...
ROS-20260714-73-0032
The vulnerability of the OpenFlow v5 protocol analyzer used by Wireshark for analyzing computer network traffic involves executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...