Lucene search
+L

5727 matches found

Snyk
Snyk
added 2026/04/21 2:8 a.m.4 views

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via the ExtractPluginFromImage function. An attacker can cause disk exhaustion by supplying a crafted container image containing a decompression bomb, which decompresses to an arbitrarily large file during plugin...

6.5CVSS5.4AI score0.00218EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/04/21 2:8 a.m.3 views

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via the ExtractPluginFromImage function. An attacker can cause disk exhaustion by supplying a crafted container image containing a decompression bomb, which decompresses to an arbitrarily large file during plugin...

6.5CVSS5.4AI score0.00218EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/04/20 7:22 p.m.11 views

CVE-2026-40324

Hot Chocolate is an open-source GraphQL server. Prior to versions 12.22.7, 13.9.16, 14.3.1, and 15.1.14, Hot Chocolate's recursive descent parser Utf8GraphQLParser has no recursion depth limit. A crafted GraphQL document with deeply nested selection sets, object values, list values, or list types...

9.1CVSS5.7AI score0.00902EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/20 3:44 p.m.9 views

SUSE-SU-2026:21237-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-39998: scsi: target: targetcoreconfigfs: Add length check to avoid buffer overflow bsc1252073. - CVE-2025-40253: s390/ctcm: Fix double-kfree bsc1255084. -...

9.8CVSS6.2AI score0.00788EPSS
SaveExploits4References122
OSV
OSV
added 2026/04/20 3:44 p.m.5 views

SUSE-SU-2026:21361-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-39998: scsi: target: targetcoreconfigfs: Add length check to avoid buffer overflow bsc1252073. - CVE-2025-40253: s390/ctcm: Fix double-kfree bsc1255084. -...

9.8CVSS6.3AI score0.00788EPSS
SaveExploits4References122
OSV
OSV
added 2026/04/20 3:9 p.m.11 views

SUSE-SU-2026:21352-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-39998: scsi: target: targetcoreconfigfs: Add length check to avoid buffer overflow bsc1252073. - CVE-2025-40253: s390/ctcm: Fix double-kfree bsc1255084. -...

9.8CVSS6.3AI score0.00788EPSS
SaveExploits4References122
Hacker One
Hacker One
added 2026/04/20 6:36 a.m.15 views

curl: Stack exhaustion in MIME multipart reading with deeply nested subparts

Summary: The MIME read path uses mutually recursive helpers for nested multipart structures without enforcing a recursion depth limit. A sufficiently deep tree of nested curlmimesubparts objects causes stack exhaustion when libcurl starts reading the MIME body. The attached PoC builds a deeply...

5.5AI score
SaveExploits0
Redos
Redos
added 2026/04/20 12:0 a.m.7 views

ROS-20260420-73-0039

Vulnerability in python-pyasn1 related to uncontrolled recursion. Exploitation of the vulnerability may allow an attacker to cause a denial of service...

7.5CVSS6.9AI score0.00803EPSS
SaveExploits1
OSV
OSV
added 2026/04/19 12:4 a.m.8 views

RLSA-2026:8471 Important: .NET 10.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.106 and .NET Runtime...

7.5CVSS5.8AI score0.02279EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/04/19 12:0 a.m.6 views

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-33947)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-33947 advisory. - jq is a command-line JSON processor. In versions 1.8.1 and below, functions jvsetpath,...

6.2CVSS5.9AI score0.00234EPSS
SaveExploits1References1
OSV
OSV
added 2026/04/18 12:7 p.m.13 views

RLSA-2026:8472 Important: .NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.116 and .NET Runtime...

7.5CVSS6.3AI score0.02279EPSS
SaveExploits0References5
OSV
OSV
added 2026/04/18 12:1 p.m.7 views

RLSA-2026:8475 Important: .NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.116 and .NET Runtime...

7.5CVSS6.3AI score0.02279EPSS
SaveExploits0References5
OSV
OSV
added 2026/04/18 12:1 p.m.19 views

RLSA-2026:8468 Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK SDKVERSION and .NET Runtime...

7.5CVSS5.8AI score0.02279EPSS
SaveExploits0References5
OSV
OSV
added 2026/04/18 12:1 p.m.7 views

RLSA-2026:8473 Important: .NET 10.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.106 and .NET Runtime...

7.5CVSS5.8AI score0.02279EPSS
SaveExploits0References5
NVD
NVD
added 2026/04/18 12:16 a.m.10 views

CVE-2026-40324

Hot Chocolate is an open-source GraphQL server. Prior to versions 12.22.7, 13.9.16, 14.3.1, and 15.1.14, Hot Chocolate's recursive descent parser Utf8GraphQLParser has no recursion depth limit. A crafted GraphQL document with deeply nested selection sets, object values, list values, or list types...

9.1CVSS0.00902EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2026/04/18 12:0 a.m.7 views

RockyLinux 9 : .NET 8.0 (RLSA-2026:8469)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8469 advisory. dotnet: .NET: Security Bypass and Denial of Service Vulnerability CVE-2026-26171 dotnet: .NET: Denial of Service via stack overflow CVE-2026-32203 dotnet...

7.5CVSS6.4AI score0.02279EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/04/18 12:0 a.m.6 views

RockyLinux 9 : .NET 10.0 (RLSA-2026:8471)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8471 advisory. dotnet: .NET: Security Bypass and Denial of Service Vulnerability CVE-2026-26171 dotnet: .NET: Denial of Service via stack overflow CVE-2026-32203 dotnet...

7.5CVSS6.4AI score0.02279EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/04/18 12:0 a.m.7 views

RockyLinux 8 : .NET 10.0 (RLSA-2026:8473)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8473 advisory. dotnet: .NET: Security Bypass and Denial of Service Vulnerability CVE-2026-26171 dotnet: .NET: Denial of Service via stack overflow CVE-2026-32203 dotnet...

7.5CVSS6.4AI score0.02279EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/04/18 12:0 a.m.6 views

RockyLinux 10 : .NET 10.0 (RLSA-2026:8467)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8467 advisory. dotnet: .NET: Security Bypass and Denial of Service Vulnerability CVE-2026-26171 dotnet: .NET: Denial of Service via stack overflow CVE-2026-32203 dotne...

7.5CVSS6.4AI score0.02279EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/04/18 12:0 a.m.9 views

RockyLinux 10 : .NET 8.0 (RLSA-2026:8470)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8470 advisory. dotnet: .NET: Security Bypass and Denial of Service Vulnerability CVE-2026-26171 dotnet: .NET: Denial of Service via stack overflow CVE-2026-32203 dotne...

7.5CVSS6.4AI score0.02279EPSS
SaveExploits0References9
Rows per page
Query Builder