Lucene search
+L

191 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/07 12:00 a.m.•6 views

CVE-2025-63235: Uncontrolled Resource Consumption

In sol commit 373d848 2024-12-12, the broker does not fully release resources when handling malformed or duplicate CONNECT packets. When clients send invalid CONNECT packets - either due to repeated attempts or failed authentication - the server may silently drop the connection or send a CONNACK...

7.5CVSS5.8AI score0.00382EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•5 views

CVE-2026-54448: Allocation of Resources Without Limits or Throttling

Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive .tgz, its custom tar unpacker reads each entry with io.ReadAlltr and no size limit. An attacker who can place a malicious .tgz file in the scanned path can craft a small compressed archive that decompresses to...

6.9CVSS6.2AI score0.00443EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/04 12:00 a.m.•4 views

CVE-2026-25579: Uncontrolled Resource Consumption

Navidrome is an open source web-based music collection server and streamer. Prior to version 0.60.0, authenticated users can crash the Navidrome server by supplying an excessively large size parameter to /rest/getCoverArt or to a shared-image URL /share/img/ . When processing such requests, the...

9.2CVSS6.3AI score0.00552EPSS
SaveExploits1References1
OSV
OSV
•added 2026/01/27 5:13 p.m.•16 views

CVE-2026-22259 Suricata dnp3: unbounded transaction growth

Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, specially crafted traffic can cause Suricata to consume large amounts of memory while parsing DNP3 traffic. This can lead to the process slowing down and running out of memory, potentially leading to it getting...

7.5CVSS5.9AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/27 12:00 a.m.•2 views

CVE-2026-22259: Uncontrolled Resource Consumption

Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, specially crafted traffic can cause Suricata to consume large amounts of memory while parsing DNP3 traffic. This can lead to the process slowing down and running out of memory, potentially leading to it getting...

7.5CVSS7.2AI score0.00583EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2019-16196

Malware in sbrugna...

6.5CVSS6.7AI score0.01461EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2014-7171

Malware in sbrugna...

7.2CVSS5.8AI score0.00473EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2011-2472

Malware in sbrugna...

4.9CVSS8AI score0.00388EPSS
SaveExploits1References14
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2018-18284

Malware in sbrugna...

7.5CVSS7.3AI score0.01363EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2010-1515

Malware in sbrugna...

2.1CVSS5.8AI score0.0034EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2010-4216

Malware in sbrugna...

4.9CVSS6.2AI score0.0091EPSS
SaveExploits4References27
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2018-6532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Icinga 2.x through 2.8.1. By sending specially crafted authenticated and unauthenticated requests, an attacker can exhaust a lot of...

7.5CVSS7.5AI score0.01363EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 8:46 a.m.•27 views

CVE-2019-6637

On BIG-IP ASM 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, Application logic abuse of ASM REST endpoints can lead to instability of BIG-IP system. Exploitation of this issue causes excessive memory consumption which results in the Linux kernel triggering OOM killer on...

6.5CVSS6.8AI score0.01461EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/02/10 12:00 a.m.•19 views

Azure Linux 3.0 Security Update: kernel (CVE-2024-39474)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39474 advisory. - In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix vmalloc which may retur...

5.5CVSS5.9AI score0.00224EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2024/11/12 9:11 a.m.•18 views

kernel: mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix vmalloc which may return null if called with GFPNOFAIL commit a421ef303008 "mm: allow !GFPKERNEL allocations for kvmalloc" includes support for GFPNOFAIL, but it presents a conflict with commit dd544141b9eb...

5.5CVSS6.4AI score0.00224EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2024/07/05 7:15 a.m.•52 views

CVE-2024-39474

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix vmalloc which may return null if called with GFPNOFAIL commit a421ef303008 "mm: allow !GFPKERNEL allocations for kvmalloc" includes support for GFPNOFAIL, but it presents a conflict with commit dd544141b9eb...

5.5CVSS6.4AI score0.00224EPSS
SaveExploits0References13
OSV
OSV
•added 2024/07/05 7:15 a.m.•37 views

UBUNTU-CVE-2024-39474

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix vmalloc which may return null if called with GFPNOFAIL commit a421ef303008 "mm: allow !GFPKERNEL allocations for kvmalloc" includes support for GFPNOFAIL, but it presents a conflict with commit dd544141b9eb...

5.5CVSS6.2AI score0.00224EPSS
SaveExploits0References14
CVE
CVE
•added 2024/07/05 6:55 a.m.•235 views

CVE-2024-39474

CVE-2024-39474 involves a Linux kernel vmalloc regression where __GFP_NOFAIL allocations may return NULL, due to a race with OOM-killer flow and GFP_KERNEL handling. The fix updates vm_area_alloc_pages() to not check fatal_signal_pending() when __GFP_NOFAIL is set, preventing a NULL vmalloc() ret...

5.5CVSS7AI score0.00224EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2024/07/05 6:55 a.m.•49 views

CVE-2024-39474 mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix vmalloc which may return null if called with GFPNOFAIL commit a421ef303008 "mm: allow !GFPKERNEL allocations for kvmalloc" includes support for GFPNOFAIL, but it presents a conflict with commit dd544141b9eb...

6AI score
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/05 12:00 a.m.•4 views

CVE-2024-39474: Allocation of Resources Without Limits or Throttling

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix vmalloc which may return null if called with GFPNOFAIL commit a421ef303008 "mm: allow !GFPKERNEL allocations for kvmalloc" includes support for GFPNOFAIL, but it presents a conflict with commit dd544141b9eb...

5.5CVSS5.6AI score0.00224EPSS
SaveExploits0References1
Rows per page
Query Builder