15608 matches found
CVE-2026-71314
Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an unauthenticated attacker can use a server island v-for prop, including vforToArray and , to trigger unbounded SSR memory allocation until MAXVFORLENGTH = 100000 and crash the Nuxt process. This iss...
CVE-2026-44605
A flaw was found in the RPM Package Manager RPM. A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. This issue arises from an error in how RPM handles certain calculations during file parsing, leading to an incorrect memor...
CVE-2026-61485
Rejected reason: this attack requires control over the search index, which is considered fully trusted by Lucy...
CVE-2026-64576 nexthop: initialize extack in nh_res_bucket_migrate()
In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...
Memory Allocation with Excessive Size Value
Overview org.apache.qpid:proton-j is a lightweight messaging library. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via improper handling of type size and count during the allocation process. An attacker can trigger excessive memory allocation by...
Memory Allocation with Excessive Size Value
Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value through improper handling of type size and count during the pre-authentication phase. An attacker can exhaust system resources by sending specially crafted requests that trigger excessive memo...
Memory Allocation with Excessive Size Value
Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via improper handling of type size and count during the pre-authentication process. An attacker can trigger excessive memory allocation by sending specially crafted input, potentially leading ...
CVE-2026-70377
The CVE-2026-70377 entry affects imagecli. The vulnerability lies in the Scale::apply() function where output dimensions are computed as (dimension as f32 * ratio) as u32 without upper-bound validation on a CLI-supplied ratio, which is parsed via nom::number::complete::float with no range check. ...
CVE-2026-70377 imagecli - Uncontrolled Memory Allocation via Unbounded scale Ratio Causes Denial of Service
imagecli's pipeline operation Scale::apply in src/imageops.rs computes output width/height as dimension as f32 ratio as u32 with no upper-bound validation on the CLI-supplied ratio, which is parsed via nom::number::complete::float with no range check. Any application embedding imagecli as a libra...
CVE-2026-70377 imagecli - Uncontrolled Memory Allocation via Unbounded scale Ratio Causes Denial of Service
imagecli's pipeline operation Scale::apply in src/imageops.rs computes output width/height as dimension as f32 ratio as u32 with no upper-bound validation on the CLI-supplied ratio, which is parsed via nom::number::complete::float with no range check. Any application embedding imagecli as a libra...
CVE-2026-70377 imagecli - Uncontrolled Memory Allocation via Unbounded scale Ratio Causes Denial of Service
imagecli's pipeline operation Scale::apply in src/imageops.rs computes output width/height as dimension as f32 ratio as u32 with no upper-bound validation on the CLI-supplied ratio, which is parsed via nom::number::complete::float with no range check. Any application embedding imagecli as a libra...
CVE-2026-61485
Apache Lucy , a Perl-based full-text search library, is affected by a Memory Allocation with Excessive Size Value vulnerability across all versions . The attack requires control over the search index , which Lucy treats as fully trusted, meaning the vulnerability is only exploitable when an attac...
CVE-2026-61485
UNSUPPORTED WHEN ASSIGNED Memory Allocation with Excessive Size Value vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access ...
EUVD-2026-53190
UNSUPPORTED WHEN ASSIGNED Memory Allocation with Excessive Size Value vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access ...
CVE-2026-61485
...
PT-2026-67952
Name of the Vulnerable Software and Affected Versions Apache Qpid Proton-J versions prior to 0.35.0 Description A pre-authentication attacker can exploit the way type size and count are handled to trigger excessive memory allocation, which may result in a denial of service. Recommendations Upgrad...
CVE-2026-70377: Memory Allocation with Excessive Size Value
imagecli's pipeline operation Scale::apply in src/imageops.rs computes output width/height as dimension as f32 ratio as u32 with no upper-bound validation on the CLI-supplied ratio, which is parsed via nom::number::complete::float with no range check. Any application embedding imagecli as a libra...
PT-2026-67959
Name of the Vulnerable Software and Affected Versions Apache Qpid Broker-J versions prior to 10.1.0 Description A pre-authentication attacker can exploit type size and count handling to trigger excessive memory allocation, which may result in a denial of service. Recommendations Upgrade to versio...
PT-2026-67956
Name of the Vulnerable Software and Affected Versions Apache Qpid Proton-Dotnet versions prior to 1.1.0 Description A pre-authentication attacker can exploit the way type size and count are handled to trigger excessive memory allocation, which may result in a denial of service. Recommendations...