349 matches found
CVE-2026-80978
A flaw was found in the Linux kernel, specifically within its IP tunnel devices. A local attacker could create a stack of user-controlled IP tunnel devices, causing the system to miscalculate the required memory for network packet headers. This miscalculation can lead to unnecessary memory...
CVE-2026-73786
CVE-2026-73786 is an unauthenticated Denial-of-Service vulnerability in the web-based management interface of HPE CPPM (Change and Patch Management). A remote attacker with network access can exploit the flaw without credentials to cause instability and degraded performance on the CPPM server. Th...
CVE-2026-73786 Unauthenticated Network-Based Denial of Service in CPPM systems
A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service DoS attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server...
EUVD-2026-75123
A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service DoS attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server...
CVE-2026-87822
t-digest versions 3.1 through 3.3 fail to validate centroid means during deserialization in MergingDigest.fromBytes, allowing attackers to inject NaN values that bypass validation checks. Attackers can craft malicious serialized digests containing NaN centroids that degrade sorting performance fr...
CVE-2026-87822
t-digest versions 3.1 through 3.3 contain a denial-of-service vulnerability in MergingDigest.fromBytes . During deserialization, centroid means are not validated, allowing an attacker to inject NaN values that bypass existing checks. When such a malformed digest is merged, sorting performance deg...
CVE-2025-52657 HCL MyXalytics is affected by multiple security vulnerabilities.
HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the number of characters which can impact system performance or availability...
EUVD-2025-210861
HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the number of characters which can impact system performance or availability...
CVE-2026-85448
MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing. A single publisher can supply unbounded distinct community names to grow retained state and per-pass work without limit, causing memory...
CVE-2026-83613
A flaw was found in xmldom, a JavaScript module for parsing XML Extensible Markup Language documents. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing an element with numerous distinct attributes. The way xmldom processes these attributes...
Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in Babel (@babel/helpers) (CVE-2025-27789)
Summary A ReDoS and performance degradation vulnerability in Babel CVE-2025-27789 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading @babel/helpers to versions 7.27.4 and 7.29.2. Vulnerability Details CVEID:CVE-2025-27789 DESCRIPTION: Babel is a compiler for writing next...
CVE-2026-80637
In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: fix unaligned memory access in timestamp adjustment Use getunalignedbe32 and putunalignedbe32 to safely read and write the timestamp fields. This prevents performance degradation due to unaligned memory acces...
Astra Linux – Vulnerability in Python 3.11
If the value passed to os.path.expandvars is controlled by the user, there is a possibility of performance degradation when expanding environment variables...
python: Python: Performance degradation in XML processing due to quadratic time complexity
A flaw was found in Python's xml.etree.ElementPath component. This vulnerability can lead to a denial of service DoS when processing specially crafted XML documents. Specifically, certain XPath index predicates used with functions like Element.findall and Element.iterfind can cause the processing...
SUSE-SU-2026:2369-1 Security update for unbound
This update for unbound fixes the following issues - CVE-2026-32792: Packet of death with DNSCrypt bsc1265583. - CVE-2026-33278: Possible remote code execution during DNSSEC validation bsc1265587. - CVE-2026-40622: 'Ghost domain name' variant bsc1265581. - CVE-2026-41292: Parsing a long list of...
CVE-2026-46295
A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. A race condition in the Advanced Programmable Interrupt Controller APIC interrupt handling can lead to an incorrect state during interrupt synchronization. This issue, occurring between a sender and target virtual...
Security update for unbound
This update for unbound fixes the following issues CVE-2026-32792: Packet of death with DNSCrypt bsc1265583. CVE-2026-33278: Possible remote code execution during DNSSEC validation bsc1265587. CVE-2026-40622: "Ghost domain name" variant bsc1265581. CVE-2026-41292: Parsing a long list of incoming...
SUSE-SU-2026:2281-1 Security update for unbound
This update for unbound fixes the following issues - CVE-2026-32792: Packet of death with DNSCrypt bsc1265583. - CVE-2026-33278: Possible remote code execution during DNSSEC validation bsc1265587. - CVE-2026-40622: 'Ghost domain name' variant bsc1265581. - CVE-2026-41292: Parsing a long list of...
CVE-2026-42923
A flaw was found in Unbound's DNSSEC validator where the code path for consulting the negative cache for DS records does not honor the limit on NSEC3 hash calculations introduced in version 1.19.1. An adversary who controls a DNSSEC-signed zone can sign NSEC3 records with high iteration counts fo...
