Lucene search
+L

5372 matches found

RedHat Linux
RedHat Linux
•added 2026/08/24 5:55 p.m.•14 views

kernel: net: openvswitch: reject oversized nested action attrs

A flaw was found in Open vSwitch in the Linux kernel. Improper handling of oversized nested action attributes can lead to a truncated length field, which could be exploited by a local attacker to alter kernel memory. This alteration might result in the disclosure of sensitive information or a loc...

7.8CVSS5.6AI score0.00189EPSS
SaveExploits2References5
AstraLinux
AstraLinux
•added 2026/08/24 10:19 a.m.•5 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: removed the spurious WARN message when writing to ZCREL2. It is entirely possible for a guest to write to the ZCREL2 sysreg alias while in a nested context. This is expected if FEATNV2 is advertised to the L1...

7.1CVSS5.9AI score0.00186EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/08/24 10:19 a.m.•5 views

Astra Linux – Vulnerability in Thunderbird

Thunderbird’s handling of the X-Mozilla-External-Attachment-URL header can be exploited to execute JavaScript in the file:/// context. By creating a nested email attachment message/rfc822 and setting its content type to application/pdf, Thunderbird may incorrectly render it as HTML when opened,...

8.1CVSS7.1AI score0.00438EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/08/24 10:19 a.m.•7 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR intercepts for L1 when AVIC is deactivated, even if L2 is active and KVM uses a separate MSR bitmap to run L2. If AVIC is ful...

8.2CVSS5.9AI score0.00183EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/08/24 10:19 a.m.•8 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Counter: Interrupt-cnt: Remove the IRQFNOTHREAD flag An IRQ handler can either use IRQFNOTHREAD or acquire spinlockt. As noted by CONFIGPROVERAWLOCKNESTING: ============================= BUG: Invalid wait context 6.18.0-rc1+git...

5.5CVSS6.6AI score0.00159EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/08/24 10:19 a.m.•9 views

Astra Linux – Vulnerability in Policykit-1

A flaw was discovered in polkit. When processing an XML policy with 32 or more nested elements at depth, an out-of-bounds write vulnerability can be triggered. This issue may lead to a crash or other unexpected behavior, and arbitrary code execution is possible without being detected. To exploit...

6.7CVSS6.2AI score0.00192EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/08/24 10:19 a.m.•7 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: KVM: x86: Acquiring kvm-srcu when handling KVMSETVCPUEVENTS Acquire kvm-srcu when processing KVMSETVCPUEVENTS. When SMM mode is toggled, KVM will forcibly leave the nested VMX/SVM state. Leaving such a state also results in...

7.8CVSS6.5AI score0.00247EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/08/24 10:19 a.m.•6 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: KVM: nVMX: Moving the consistency check between vTPR and TPR Threshold to “normal” checks Moving the off-by-default consistency check for vmcs12.tprthreshold versus the virtual APIC vTPR to the “normal” control checks is...

7.8CVSS5.9AI score0.00141EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/24 12:00 a.m.•19 views

PT-2026-81027

Name of the Vulnerable Software and Affected Versions Mistune versions 3.3.0 through 3.3.2 Description This issue allows a Denial of Service DoS through deeply nested tokens. When rendering HTML, consecutive asterisk characters can create deeply nested emphasis tokens. The recursive rendering...

7.5CVSS5.2AI score0.00488EPSS
SaveExploits0References21
Github Security Blog
Github Security Blog
•added 2026/08/23 3:33 p.m.•11 views

Duplicate Advisory: Uncontrolled recursion DoS in JustHTML() via deeply nested HTML

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-v7cf-c9rm-wm3j. This link is maintained to preserve external references. Original Description justhtml through 1.9.1 fixed in 1.10.0 is vulnerable to uncontrolled recursion leading to denial of service. During...

8.7CVSS5.4AI score0.00488EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2026/08/23 1:34 p.m.•43 views

CVE-2026-9769 justhtml before 1.10.0 Denial of Service via deeply nested HTML

justhtml through 1.9.1 fixed in 1.10.0 is vulnerable to uncontrolled recursion leading to denial of service. During JustHTML construction, TreeBuilder.finish unconditionally calls populateselectedcontent, which recursively traverses the DOM tree via findelements/findelement without a depth bound...

8.7CVSS0.00488EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/23 1:34 p.m.•12 views

CVE-2026-9769 justhtml before 1.10.0 Denial of Service via deeply nested HTML

justhtml through 1.9.1 fixed in 1.10.0 is vulnerable to uncontrolled recursion leading to denial of service. During JustHTML construction, TreeBuilder.finish unconditionally calls populateselectedcontent, which recursively traverses the DOM tree via findelements/findelement without a depth bound...

8.7CVSS5.4AI score0.00488EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/23 1:34 p.m.•12 views

CVE-2026-9769 justhtml before 1.10.0 Denial of Service via deeply nested HTML

justhtml through 1.9.1 fixed in 1.10.0 is vulnerable to uncontrolled recursion leading to denial of service. During JustHTML construction, TreeBuilder.finish unconditionally calls populateselectedcontent, which recursively traverses the DOM tree via findelements/findelement without a depth bound...

8.7CVSS5.7AI score
SaveExploits0References4
CVE
CVE
•added 2026/08/23 1:34 p.m.•44 views

CVE-2026-9769

justhtml (Python HTML parser) through version 1.9.1 is vulnerable to uncontrolled recursion leading to denial of service. During JustHTML() construction, TreeBuilder.finish() unconditionally calls _populate_selectedcontent(), which recursively traverses the DOM tree via _find_elements()/_find_ele...

8.7CVSS5.5AI score0.00488EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/08/22 3:31 p.m.•12 views

Duplicate Advisory: Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rf74-v2fm-23pw. This link is maintained to preserve external references. Original Description NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decodeobj that allows...

8.7CVSS7AI score0.00521EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2026/08/22 3:31 p.m.•9 views

GHSA-CV2G-M8RR-888C Duplicate Advisory: Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rf74-v2fm-23pw. This link is maintained to preserve external references. Original Description NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decodeobj that allows...

8.7CVSS5.8AI score
SaveExploits0References4
NVD
NVD
•added 2026/08/22 3:16 p.m.•16 views

CVE-2026-66393

NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decodeobj that allows attackers to cause denial of service by supplying deeply nested JSON structures. Attackers can craft JSON payloads exceeding the recursion limit to trigger an unhandled RecursionErro...

8.7CVSS0.00521EPSS
SaveExploits1References2
PyPA
PyPA
•added 2026/08/22 3:16 p.m.•13 views

PYSEC-2026-3724

NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decodeobj that allows attackers to cause denial of service by supplying deeply nested JSON structures. Attackers can craft JSON payloads exceeding the recursion limit to trigger an unhandled RecursionErro...

8.7CVSS5.3AI score0.00521EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2026/08/22 3:16 p.m.•10 views

PYSEC-0000-CVE-2026-66393

NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decodeobj that allows attackers to cause denial of service by supplying deeply nested JSON structures. Attackers can craft JSON payloads exceeding the recursion limit to trigger an unhandled RecursionErro...

8.7CVSS5.3AI score0.00521EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2026/08/22 2:12 p.m.•33 views

CVE-2026-66393 NLTK before 3.9.4 Denial of Service via JSONTaggedDecoder

NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decodeobj that allows attackers to cause denial of service by supplying deeply nested JSON structures. Attackers can craft JSON payloads exceeding the recursion limit to trigger an unhandled RecursionErro...

8.7CVSS0.00521EPSS
SaveExploits1References2
Rows per page
Query Builder