17145 matches found
CVE-2026-72651
Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated user with read-only privileges to the alerting feature could submit a specially crafted, malformed payload that causes the Kibana process to...
CVE-2026-72659
Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to denial of service via Excessive Allocation CAPEC-130. A specially crafted, malformed payload submitted to a Kibana visualization feature by an authenticated user holding only low-privileged access is not correctly...
CVE-2026-18846
CVE-2026-18846 – IBM i host servers Affected products/versions: IBM i 7.3, 7.4, 7.5, 7.6. Root cause and impact: The vulnerability is a buffer overflow caused by improper validation of client data, which can be exploited by sending malformed requests to a host server to cause a denial of service ...
CVE-2026-73515 PostGIS < 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf Buffer
PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that th...
CVE-2026-65933
A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...
CVE-2026-65936
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...
CVE-2026-73555
vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validationexceptionhandler in vllm/entrypoints/openai/serverutils.py converts FastAPI RequestValidationError objects with strexc, and sanitizemessage in vllm/entrypoints/utils.py does not remove traceback-styl...
CVE-2026-65936
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...
CVE-2026-65936 RS9116W/SiWx917 malformed packet with increased length field causes memory leak
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...
EUVD-2026-58085
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...
CVE-2026-65936 RS9116W/SiWx917 malformed packet with increased length field causes memory leak
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...
CVE-2026-65936
CVE-2026-65936 affects the RS9116W/SiWx917 Bluetooth stack. The root cause is a malformed Bluetooth connection request message with an increased length field, which can cause a memory leak and potential leakage of sensitive information. The record from CVELIST explicitly frames it as a malformed ...
CVE-2026-65933
A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...
CVE-2026-65933 BT122 malformed packet with increased length field causes memory leak
A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...
CVE-2026-65933
The CVE-2026-65933 entry concerns the BT122 Bluetooth module. A malformed Bluetooth connection request message with an increased length field can trigger a memory leak, potentially leaking sensitive information. The vulnerability is tied to the BT122’s handling of connection request messages (des...
EUVD-2026-58079
A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...
CVE-2026-73143
GHSA-38fq-mrrg-8rmr: RtlTcp: malformed greeting causes daemon exit...
PT-2026-71651
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...
CVE-2026-73555: Generation of Error Message Containing Sensitive Information
vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validationexceptionhandler in vllm/entrypoints/openai/serverutils.py converts FastAPI RequestValidationError objects with strexc, and sanitizemessage in vllm/entrypoints/utils.py does not remove traceback-styl...