Lucene search
+L

11724 matches found

OSV
OSV
added 2026/08/25 9:17 p.m.11 views

DEBIAN-CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS5.6AI score0.00344EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/25 9:17 p.m.9 views

CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS0.00344EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/08/25 9:17 p.m.14 views

CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS5.8AI score0.00344EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/25 9:17 p.m.7 views

UBUNTU-CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS5.8AI score0.00344EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/08/25 8:36 p.m.9 views

CVE-2026-77680 Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fix

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS5.5AI score0.00344EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/25 8:36 p.m.9 views

EUVD-2026-66111

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS5.4AI score0.00344EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/25 8:36 p.m.41 views

CVE-2026-77680 Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fix

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS0.00344EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/08/25 8:36 p.m.11 views

CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS5.6AI score0.00344EPSS
SaveExploits0
CVE
CVE
added 2026/08/25 8:36 p.m.23 views

CVE-2026-77680

libsoup contains an algorithmic complexity flaw in its HTTP Range header processing that persists after the CVE-2025-32907 fix. The root cause is that the coalescing loop in soup_message_headers_get_ranges_internal() uses g_array_remove_index() for each merged range, resulting in O(N²) work when ...

5.3CVSS5.5AI score0.00344EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/25 8:36 p.m.10 views

CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS6.7AI score0.00684EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/08/25 4:17 p.m.14 views

CVE-2026-79775

rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...

7.1CVSS6AI score0.00307EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/25 1:01 p.m.13 views

CVE-2026-66276

A flaw was found in Apache Qpid Proton-J. An authenticated attacker can exploit this vulnerability by crafting a specially designed disposition frame with large or illegal ranges. This can cause excessive CPU usage due to naive range handling, leading to a denial of service DoS for the affected...

6.5CVSS5.4AI score0.00421EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/25 2:16 a.m.10 views

UBUNTU-CVE-2026-34967

Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file write vulnerability in the ns parameter of plugins/sql-log.php. An authenticated user can supply path traversal sequences in the ns parameter to write arbitrary .sql files with attacker-controlled conte...

5.4CVSS6AI score0.00237EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/25 12:00 a.m.19 views

PT-2026-81851

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in soup...

5.3CVSS6.7AI score0.00684EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/08/24 10:16 p.m.12 views

CVE-2026-17113

A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...

6CVSS5.5AI score0.00107EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/24 9:22 p.m.9 views

CVE-2026-17113 Cri-o: cri-o: unvalidated image env var causes daemon crash

A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...

6CVSS5.7AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/24 9:22 p.m.37 views

CVE-2026-17113 Cri-o: cri-o: unvalidated image env var causes daemon crash

A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...

6CVSS0.00107EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/24 9:22 p.m.14 views

CVE-2026-17113

A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...

6CVSS5.6AI score0.00107EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv
added 2026/08/24 3:33 p.m.11 views

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @crashtest-ai/cli (>=0.1.0, <=0.1.1) +27 more potentially affected by CVE-2026-76172 via fast-uri (>=3.0.1, <=3.1.5)

fast-uri NPM version =3.0.1, =0.3.1, =0.1.0, =0.1.0, =0.1.0, =1.5.40, =1.4.2, =1.2.0, =1.4.18, =5.4.3, =0.2.0-alpha.5, =0.1.0, =1.0.0, =1.0.0, =0.1.6, =0.2.5 and more Source cves: CVE-2026-76172 Source advisory: SNYK:JS-FASTURI-19256869...

7.5CVSS5.8AI score0.00232EPSS
SaveExploits0
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.12 views

Astra Linux – Vulnerability in libmysofa

Incorrect handling of input data in the loudness function of the libmysofa library in versions 0.5 to 1.1 can lead to heap buffer overflows and access to unallocated memory blocks...

6.5CVSS6.9AI score0.01234EPSS
SaveExploits1References2
Rows per page
Query Builder