Lucene search
+L

4474 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/27 12:0 a.m.5 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005138)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005138 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Ignore nCR34:0 when loading PDPTEs from memory Ignore nCR34:0 when loading PDPTEs from...

7.1CVSS6.7AI score0.00243EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/26 12:0 a.m.4 views

TencentOS Server 3: python3.12 (TSSA-2026:0033)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0033 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

6.3CVSS6.9AI score0.00708EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/01/24 12:24 a.m.6 views

SUSE CVE-2026-0994

A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can...

5.9CVSS5.7AI score0.00662EPSS
SaveExploits0References15
NVD
NVD
added 2026/01/23 4:15 p.m.12 views

CVE-2025-71161

In the Linux kernel, the following vulnerability has been resolved: dm-verity: disable recursive forward error correction There are two problems with the recursive correction: 1. It may cause denial-of-service. In fecreadbufs, there is a loop that has 253 iterations. For each iteration, we may ca...

5.5CVSS0.00165EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2026/01/23 3:31 p.m.20 views

protobuf affected by a JSON recursion depth bypass

A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can...

8.2CVSS5.6AI score0.00662EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/01/23 3:23 p.m.34 views

CVE-2025-71161 dm-verity: disable recursive forward error correction

In the Linux kernel, the following vulnerability has been resolved: dm-verity: disable recursive forward error correction There are two problems with the recursive correction: 1. It may cause denial-of-service. In fecreadbufs, there is a loop that has 253 iterations. For each iteration, we may ca...

0.00165EPSS
SaveExploits0References6
OSV
OSV
added 2026/01/23 3:16 p.m.11 views

AZL-76602 CVE-2026-0994 affecting package pytorch for versions less than 2.2.2-12

A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can...

8.2CVSS7.3AI score0.00662EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/23 3:16 p.m.6 views

AZL-76505 CVE-2026-0994 affecting package pytorch for versions less than 2.0.0-14

A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can...

8.2CVSS7.3AI score0.00662EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/23 3:16 p.m.8 views

AZL-75830 CVE-2026-0994 affecting package protobuf for versions less than 25.3-6

A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can...

8.2CVSS7.3AI score0.00662EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/23 3:16 p.m.8 views

AZL-76481 CVE-2026-0994 affecting package mysql for versions less than 8.0.45-2

A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can...

8.2CVSS7.3AI score0.00662EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/01/23 3:16 p.m.9 views

CVE-2026-0994

A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can...

8.2CVSS6.7AI score0.00662EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:55 p.m.3 views

CVE-2026-0994

A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can...

8.2CVSS5.9AI score0.00662EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/23 2:55 p.m.11 views

CVE-2026-0994 Denial of Service in Python Protobuf

A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can...

8.2CVSS5.6AI score0.00662EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/23 2:55 p.m.4 views

CVE-2026-0994 Denial of Service in Python Protobuf

A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can...

8.2CVSS6.7AI score0.00662EPSS
SaveExploits0References21
CVE
CVE
added 2026/01/23 2:55 p.m.315 views

CVE-2026-0994

CVE-2026-0994 affects google.protobuf.json_format.ParseDict() in Python. The root cause is missing recursion depth accounting inside the internal Any-handling logic, allowing crafting deeply nested google.protobuf.Any structures to bypass the max_recursion_depth limit, exhausting Python’s recursi...

8.2CVSS5.6AI score0.00662EPSS
SaveExploits0References19Affected Software1
Cvelist
Cvelist
added 2026/01/23 2:55 p.m.43 views

CVE-2026-0994 Denial of Service in Python Protobuf

A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can...

8.2CVSS0.00662EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/01/23 12:28 a.m.8 views

SUSE CVE-2025-67221

The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents...

5.9CVSS5.4AI score0.0055EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2026/01/23 12:0 a.m.9 views

Google Protobuf security vulnerabilities

Google Protobuf is a data exchange format developed by Google, Inc. of the United States. There is a security vulnerability in Google Protobuf. This vulnerability stems from the google.protobuf.jsonformat.ParseDict function, which can bypass the maxrecursiondepth limit when parsing nested...

8.2CVSS6.6AI score0.00662EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/23 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-0994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when parsing...

8.2CVSS6.5AI score0.00662EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/22 6:30 p.m.3 views

GHSA-HX9Q-6W63-J58V orjson does not limit recursion for deeply nested JSON documents

The orjson.dumps function in orjson before 3.11.6 does not limit recursion for deeply nested JSON documents...

8.7CVSS5.8AI score0.0055EPSS
SaveExploits1References7
Rows per page
Query Builder