Lucene search
+L

334645 matches found

OSV
OSV
added 2026/08/16 7:25 p.m.6 views

MINI-H8JM-9R6M-X44M

Bulletin has no description...

7.5CVSS4.8AI score0.00298EPSS
SaveExploits0
OSV
OSV
added 2026/08/16 7:25 p.m.8 views

MINI-HG23-RPX9-FV4W

Bulletin has no description...

7.5CVSS7.3AI score0.00549EPSS
SaveExploits0
OSV
OSV
added 2026/08/16 7:25 p.m.7 views

MINI-97HQ-JQCX-5WPP

Bulletin has no description...

6.1CVSS4.9AI score0.0031EPSS
SaveExploits0
OSV
OSV
added 2026/08/16 7:25 p.m.7 views

MINI-RFV3-CXR5-6G82

Bulletin has no description...

7.5CVSS4.8AI score0.00298EPSS
SaveExploits0
OSV
OSV
added 2026/08/16 7:25 p.m.7 views

MINI-R7CV-JR9Q-PWCW

Bulletin has no description...

8.4CVSS4.8AI score0.00107EPSS
SaveExploits0
OSV
OSV
added 2026/08/16 7:25 p.m.7 views

MINI-XGGC-G73W-42C5

Bulletin has no description...

6.1CVSS4.9AI score0.0031EPSS
SaveExploits0
OSV
OSV
added 2026/08/16 7:25 p.m.7 views

MINI-8R67-FP44-C6FM

Bulletin has no description...

7.5CVSS4.9AI score0.00568EPSS
SaveExploits0
NVD
NVD
added 2026/08/16 2:16 p.m.11 views

CVE-2026-74789

Scriban before 7.0.0 affected = 6.6.0 applies its LoopLimit constraint only to script loop statements and not to expensive iteration performed inside built-in operators and functions. As a result, a single expression such as 1..1000000 | array.size — or a memory-amplification expression such as '...

8.7CVSS0.0034EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/16 2:16 p.m.14 views

CVE-2026-74786

Scriban before 7.0.0 affected versions = 6.6.0 contains a denial-of-service vulnerability in which the LimitToString safety limit default 1MB can be bypassed because ObjectToString resets the per-call length counter currentToStringLength on every top-level call and StringBuilderOutput enforces no...

7.1CVSS0.00272EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/16 2:16 p.m.14 views

CVE-2026-74788

Scriban before 7.0.0 affected versions = 6.6.0 contains an uncontrolled memory allocation vulnerability in the string.padleft and string.padright template functions, which perform no validation on the width parameter before delegating to .NET's String.PadLeft/PadRight. When an application exposes...

8.7CVSS0.00278EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/16 2:16 p.m.13 views

CVE-2026-73057

stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing attackers to cause denial of service by memory exhaustion. Attackers can host malicious SVGs with extremely large width and height values and trigger concurrent requests to exhaust available memory...

8.7CVSS0.00278EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/16 2:16 p.m.15 views

CVE-2026-73062

Scriban versions 3.0.0 through 7.2.0 contain a denial of service vulnerability in the array multiplication operator that allocates memory without enforcing LoopLimit or overflow-safe arithmetic checks. Attackers can supply a large integer multiplier in a template to force multi-gigabyte memory...

8.7CVSS0.00278EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/16 2:16 p.m.12 views

CVE-2026-72888

Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire. smartrequire stores results in a process-global hash with no bound and no eviction, and keeps an entry for every class name it is asked about, including names that failed...

6.5CVSS0.00436EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/16 2:16 p.m.7 views

MINI-2GFF-W3WX-VHVJ

Bulletin has no description...

9.8CVSS7.4AI score0.00461EPSS
SaveExploits1
OSV
OSV
added 2026/08/16 2:16 p.m.10 views

UBUNTU-CVE-2026-72888

Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire. smartrequire stores results in a process-global hash with no bound and no eviction, and keeps an entry for every class name it is asked about, including names that failed...

6.5CVSS5.6AI score0.00436EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/16 1:50 p.m.64 views

CVE-2026-72888

Net::OAuth Perl module before 0.32 has an unbounded process-global cache in smart_require that stores every requested class name (including failed loads) before error checking. The key is derived from the attacker-controlled signature_method request parameter, so a remote client can force the cac...

6.5CVSS5.5AI score0.00436EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/08/16 1:50 p.m.17 views

CVE-2026-72888

Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire. smartrequire stores results in a process-global hash with no bound and no eviction, and keeps an entry for every class name it is asked about, including names that failed...

5.5AI score0.00436EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/16 1:50 p.m.10 views

EUVD-2026-59988

Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire. smartrequire stores results in a process-global hash with no bound and no eviction, and keeps an entry for every class name it is asked about, including names that failed...

5.5AI score0.00436EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/08/16 1:50 p.m.11 views

CVE-2026-72888

Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire. smartrequire stores results in a process-global hash with no bound and no eviction, and keeps an entry for every class name it is asked about, including names that failed...

6.5CVSS5.6AI score0.00436EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/08/16 1:50 p.m.41 views

CVE-2026-72888 Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smart_require

Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire. smartrequire stores results in a process-global hash with no bound and no eviction, and keeps an entry for every class name it is asked about, including names that failed...

0.00436EPSS
SaveExploits0References3
Rows per page
Query Builder