399939 matches found
CVE-2026-110247
A flaw was found in Thunderbird. A remote attacker could exploit an integer overflow in the libmime library to achieve arbitrary code execution or cause a Denial of Service DoS. By sending a sufficiently large email message, an attacker causes buffer size arithmetic to overflow without proper...
CVE-2026-95502
A flaw was found in Grafana. A malicious or compromised Git server configured for Git Sync provisioning can return oversized or highly compressed responses, causing uncontrolled memory consumption. This issue can exhaust system memory, resulting in a Denial of Service DoS condition on the Grafana...
CVE-2026-103856
Adobe Framemaker is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to the disclosure of sensitive memory information. An attacker can leverage this flaw to access sensitive data, but exploitation requires user interaction to open a malicious file . No specific patch ver...
CVE-2026-103857
Adobe Framemaker is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to the disclosure of sensitive memory . An attacker could leverage this flaw to access sensitive information, but exploitation requires user interaction where a victim must open a malicious file. No spec...
CVE-2026-54086
The SLE API for Java (an implementation of CCSDS Space Link Extension Services) is vulnerable to a Denial of Service attack in versions prior to 5.1.7 . The flaw exists in the ISP1 PDU handling path , where the application decodes an attacker-controlled body length and allocates a byte array with...
CVE-2026-54086 SLE API for Java: Uncontrolled Memory Allocation / handled exception leading to Denial of Service
SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing...
CVE-2026-54086 SLE API for Java: Uncontrolled Memory Allocation / handled exception leading to Denial of Service
SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing...
CVE-2026-95502
A Git server that Grafana's Git Sync provisioning is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses uncontrolled resource consumption. Exploitation requires an administrator to have configured Git Sync with that server...
CVE-2026-33374
The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions...
CVE-2026-33374
The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions...
UBUNTU-CVE-2026-33374
The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions...
CVE-2026-88833
A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...
CVE-2026-19940
The Bluetooth Classic Hands-Free Profile Audio Gateway implementation in subsys/bluetooth/host/classic/hfpag.c keeps its struct bthfpag objects in a static pool indexed by ACL connection index. On link teardown, hfpagdisconnected cancels ag-txwork and the per-call work items and then clears...
CVE-2026-95502 Git Sync memory exhaustion via a malicious Git server
A Git server that Grafana's Git Sync provisioning is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses uncontrolled resource consumption. Exploitation requires an administrator to have configured Git Sync with that server...
EUVD-2026-98905
The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions...
CVE-2026-95502 Git Sync memory exhaustion via a malicious Git server
A Git server that Grafana's Git Sync provisioning is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses uncontrolled resource consumption. Exploitation requires an administrator to have configured Git Sync with that server...
EUVD-2026-98902
A Git server that Grafana's Git Sync provisioning is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses uncontrolled resource consumption. Exploitation requires an administrator to have configured Git Sync with that server...
CVE-2026-95502
Grafana's Git Sync (provisioning) is vulnerable to memory exhaustion due to uncontrolled resource consumption. A malicious Git server can trigger this by returning oversized or highly compressed responses . Exploitation requires an administrator to have configured Git Sync to communicate with the...
CVE-2026-33374 Unbounded memory allocation in the Prometheus rule conversion API
The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions...
CVE-2026-33374 Unbounded memory allocation in the Prometheus rule conversion API
The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions...