Lucene search
+L

85 matches found

osv_azl
osv_azl
•added 2026/10/08 5:17 p.m.•15 views

AZL-107303 CVE-2026-61801 affecting package docker-buildx 0.14.0-17

The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...

5.5CVSS5.8AI score0.00113EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/10/08 5:17 p.m.•15 views

AZL-107243 CVE-2026-61801 affecting package containerd2 2.3.4-1

The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...

5.5CVSS5.8AI score0.00113EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/10/08 5:17 p.m.•10 views

AZL-107360 CVE-2026-61801 affecting package docker-compose 2.27.0-14

The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...

5.5CVSS5.8AI score0.00113EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 8:17 p.m.•10 views

CVE-2026-102404

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. A low-privileged authenticated user can submit a specially crafted query that causes uncontrolled memory growth in the query processing engine, resulting in an out-of-memor...

6.5CVSS0.00309EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/07/15 2:12 p.m.•11 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via HTTP/2 request processing. An attacker can cause a denial of service by sending crafted HTTP/2 traffic that triggers an out-of-memory condition, exhausting available memory and...

8.7CVSS7AI score0.01174EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/10 12:00 a.m.•6 views

CVE-2026-53460: Allocation of Resources Without Limits or Throttling

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, a missing check for maximum memory request in AcquireAlignedMemory could trigger an out-of-Memory condition. This issue has been patched in versions 6.9.13-50 a...

7.5CVSS6.8AI score0.0063EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/05/28 3:55 a.m.•33 views

SUSE CVE-2026-45979

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: clean up the amdgpucsparserbos In low memory conditions, kmalloc can fail. In such conditions unlock the mutex for a clean exit. We do not need to amdgpubolistput as it's been handled in the amdgpucsparserfini...

5.5CVSS5.9AI score0.00143EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/05/14 8:17 p.m.•34 views

UBUNTU-CVE-2026-44638

libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, a wrong NULL check after an allocation call in sixeldecoderaw and sixeldecode causes a NULL pointer dereference whenever the allocation fails. The check tests the address of the output parameter alway...

2.5CVSS5.7AI score0.00125EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/05/14 12:00 a.m.•47 views

PT-2026-41034

libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, a wrong NULL check after an allocation call in sixel decode raw and sixel decode causes a NULL pointer dereference whenever the allocation fails. The check tests the address of the output parameter...

2.5CVSS5.7AI score0.00125EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2026/01/22 12:00 a.m.•13 views

Azure Linux 3.0 Security Update: kernel (CVE-2025-38321)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38321 advisory. - In the Linux kernel, the following vulnerability has been resolved: smb: Log an error when closeallcacheddir...

7.8CVSS6.2AI score0.002EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/20 12:00 a.m.•16 views

MiracleLinux 9 : java-17-openjdk-17.0.13.0.11-3.el9.ML.1 (AXSA:2024-8936:15)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8936:15 advisory. giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function CVE-2023-48161 JDK: Array indexing integer overflow 8328544 CVE-2024-212...

7.1CVSS6.7AI score0.01149EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/09 6:30 p.m.•22 views

EUVD-2025-33402

A Buffer Copy without Checking Size of Input vulnerability in the Session Initialization Protocol SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When memory utilization is high, and specific...

8.2CVSS6.4AI score0.00331EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2008-3897

Malware in sbrugna...

5CVSS5.9AI score0.03102EPSS
SaveExploits1References29
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2014-9776

Malware in sbrugna...

10CVSS8.2AI score0.00964EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2019-5939

Malware in sbrugna...

5.9CVSS6.3AI score0.00669EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2020-27087

Malware in sbrugna...

7.8CVSS7.3AI score0.01062EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2019-5999

Malware in sbrugna...

6CVSS5.9AI score0.00796EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2018-13549

Malware in sbrugna...

9.8CVSS8.1AI score0.02369EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2019-18482

Malware in sbrugna...

7.5CVSS6.8AI score0.01496EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-20925

Malicious code in bioql PyPI...

6.4AI score0.002EPSS
SaveExploits0References4
Rows per page
Query Builder