220 matches found
CVE-2026-69702
SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated attackers to crash the server by supplying a crafted Zstandard-compressed payload with an inflated framecontentsize field in the frame header. Attackers can store a base64-encode...
EUVD-2026-52851
SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated attackers to crash the server by supplying a crafted Zstandard-compressed payload with an inflated framecontentsize field in the frame header. Attackers can store a base64-encode...
Memory Allocation with Excessive Size Value
Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the readPacket method of UserAttributeSubpacketInputStream, which reads a 5-octet subpacket length up to Integer.MAXVALUE and allocates new bytebodyLen-1 after checking only against a limit...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: undertow (UTSA-2026-021479)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021479 advisory. A flaw was found in Undertow. Servlets using a method that calls HttpServletRequestImpl.getParameterNames can cause an OutOfMemoryError when the client sends a reque...
Unity Linux 20.1060e / 20.1070e Security Update: tomcat (UTSA-2026-017430)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017430 advisory. The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The obje...
CVE-2024-4027
The CVE-2024-4027 entry describes a flaw in Undertow where Servlets calling HttpServletRequestImpl.getParameterNames() can trigger an OutOfMemoryError when clients send requests with large parameter names, enabling a remote DoS. Affected: Undertow (Servlet handling path). Root cause: large parame...
CVE-2024-4027
A flaw was found in Undertow. Servlets using a method that calls HttpServletRequestImpl.getParameterNames can cause an OutOfMemoryError when the client sends a request with large parameter names. This issue can be exploited by an unauthorized user to cause a remote denial-of-service DoS attack...
CVE-2023-50572
An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM OutofMemory error...
CVE-2023-50248
CKAN is an open-source data management system for powering data hubs and data portals. Starting in version 2.0.0 and prior to versions 2.9.10 and 2.10.3, when submitting a POST request to the /dataset/new endpoint including either the auth cookie or the Authorization header with a specially-craft...
EUVD-2020-12729
Malware in sbrugna...
EUVD-2021-0822
Malware in sbrugna...
EUVD-2019-2324
Malware in sbrugna...
EUVD-2021-1684
Malware in sbrugna...
EUVD-2025-8455
Malicious code in bioql PyPI...
EUVD-2024-3227
Malicious code in bioql PyPI...
EUVD-2024-1174
Malicious code in bioql PyPI...
EUVD-2022-1046
Malicious code in bioql PyPI...
EUVD-2021-28095
Malicious code in bioql PyPI...