CVE-2026-110694 OAID Tengine tmfile Model Loader tm2_serializer.c get_tm_file_model out-of-bounds

A vulnerability has been found in OAID Tengine up to 1.12.0. This vulnerability affects the function gettmfilemodel of the file source/serializer/tmfile/tm2serializer.c of the component tmfile Model Loader. Such manipulation of the argument offsetroot leads to out-of-bounds read. It is possible t...

HTTP3ONSTEROIDS

Table of contents Vulnerability Description Source Code Review Lab Setup Identifying the issue References Vulnerability Description HAProxy's HTTP/3 implementation fails to block a malformed HTTP header field name , and when deployed in front of a server that incorrectly process this malformed...

CVE-2026-77427

The self-hosted file manager FileRise versions 3.9.0 through 3.22.0 is vulnerable to an insecure default cryptographic key fallback in manual installations. If the PERSISTENT_TOKENS_KEY or metadata/persistent_tokens.key are missing, the system activates a published legacy compatibility key. An at...

CVE-2026-110679

The OpenSIPS software is vulnerable in versions up to 3.6.8 and 4.0.1 due to an out-of-bounds read vulnerability. The flaw exists within the rtpproxy_offer/rtpproxy_answer functions of the rtpproxy component, which can be triggered through remote manipulation. This vulnerability could allow an at...

CVE-2026-110679 OpenSIPS rtpproxy rtpproxy_answer out-of-bounds

A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxyoffer/rtpproxyanswer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resol...

CVE-2026-110679 OpenSIPS rtpproxy rtpproxy_answer out-of-bounds

A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxyoffer/rtpproxyanswer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resol...

CVE-2026-110679

A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxyoffer/rtpproxyanswer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resol...

EUVD-2026-101677

A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxyoffer/rtpproxyanswer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resol...

CVE-2026-110679 OpenSIPS rtpproxy rtpproxy_answer out-of-bounds

A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxyoffer/rtpproxyanswer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resol...

CVE-2026-0314 GlobalProtect App: Local Denial of Service (DoS) on Windows

A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service DoS condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability...

EUVD-2026-101672

A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service DoS condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability...

EUVD-2026-101665

A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service DoS condition by sending a specially crafted API request. The security risk posed by this issue is significantly minimized by...

CVE-2026-0317

A denial of service (DoS) vulnerability exists in Palo Alto Networks PAN-OS software. The flaw allows an authenticated user with a read-only administrator role to trigger a DoS condition by submitting a specially crafted API request . To minimize risk, it is recommended to restrict management int...

CVE-2026-0317 PAN-OS: Denial of Service Vulnerability

A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service DoS condition by sending a specially crafted API request. The security risk posed by this issue is significantly minimized by...

EUVD-2026-101636

A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service DoS condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode. Cloud...

CVE-2026-0321

Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service DoS condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition...

CVE-2022-24122

CVE-2022-24122 Simple Denial of Service using CVE-2022-24122 It works with 1 core system and it has 80% probability of success with 2 cores...

GHSA-7PXR-59RR-HQJ2 Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion

Impact A small YAML OpenAPI document containing nested anchors and aliases can cause uncontrolled resource consumption in Microsoft.OpenApi.YamlReader and Microsoft.OpenApi.Readers. The issue affects OpenAPI document parsing through the public YAML reader APIs and can cause the parsing process to...

EUVD-2026-73080

Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion...

Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion

Impact A small YAML OpenAPI document containing nested anchors and aliases can cause uncontrolled resource consumption in Microsoft.OpenApi.YamlReader and Microsoft.OpenApi.Readers. The issue affects OpenAPI document parsing through the public YAML reader APIs and can cause the parsing process to...