745422 matches found
CVE-2026-75602
creationtimestamp| type| source ---|---|--- 2026-09-03 18:35:06+00:00| published-proof-of-concept| https://github.com/OpenListTeam/OpenList/security/advisories/GHSA-h6cj-26g5-67fv...
org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service via unbounded type nesting
A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit a vulnerability related to unbounded type nesting. This could lead to a StackOverflowError, causing the affected system to become unresponsive and resulting in a denial of service...
org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak
A flaw was found in Apache HttpComponents Client, specifically in its classic input/output I/O model. When processing a response message with an invalid or unsupported Content-Encoding header, the client fails to properly release the underlying network connection. This connection leak can lead to...
org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service due to excessive allocation
A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit a vulnerability in how the software handles type sizes and counts. This could lead to excessive memory allocation, causing the system to become unresponsive and resulting in a denial of...
qpid-proton-j: Apache Qpid Proton-J: Denial of Service via unbounded symbol value caching
A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit an issue with unbounded symbol value caching. This could lead to resource exhaustion, where the system runs out of available resources, ultimately causing a denial of service DoS. A denial ...
DEBIAN-CVE-2026-84968
An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially formed input to have a small amount of adjacent process memory copied into an error message that is returned to application code. This may result in unintended...
CVE-2026-84968
An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially formed input to have a small amount of adjacent process memory copied into an error message that is returned to application code. This may result in unintended...
EUVD-2026-56926
ffuf denial of service OOM via HTTP response decompression bomb...
GHSA-JCVH-XF52-2CWM ffuf denial of service (OOM) via HTTP response decompression bomb
Summary A malicious or attacker-controlled target server can crash ffuf with an out-of-memory condition by returning a compressed HTTP response that decompresses to a very large body a decompression bomb. This works against default usage with no special flags. Details The response body size guard...
EUVD-2026-63089
LiquidJS has an infinite loop vulnerability in its striphtml filter...
CVE-2026-84776
Unauthenticated Denial of Service Attack in MalCare Security = 6.69 versions...
CVE-2026-84778
Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...
CVE-2026-84968 Heap out-of-bounds read via corrupt nested BSON in field path error message
An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially formed input to have a small amount of adjacent process memory copied into an error message that is returned to application code. This may result in unintended...
CVE-2026-84968 Heap out-of-bounds read via corrupt nested BSON in field path error message
An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially formed input to have a small amount of adjacent process memory copied into an error message that is returned to application code. This may result in unintended...
CVE-2026-84968
An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver can be triggered by an unauthenticated party supplying specially crafted input containing corrupt nested BSON in a field path. This causes a small amount of adjacent process memory to be copied into an error message re...
CVE-2026-84778 WordPress Migrate Guru – Site Migration & Cloning plugin <= 6.65 - Denial of Service Attack vulnerability
Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...
EUVD-2026-70572
Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...
CVE-2026-84778
An unauthenticated Denial of Service vulnerability affects the Migrate Guru – Site Migration & Cloning WordPress plugin in versions