Lucene search
+L

5669 matches found

OSV
OSV
added 2026/07/06 11:48 a.m.6 views

USN-8509-1 python3.10, python3.12, python3.14 vulnerabilities

It was discovered that Python incorrectly normalized paths in the tarfile module. An attacker could possibly use this issue to bypass path restrictions. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. CVE-2025-13462 It was discovered that Python's HTMLParser incorrectly handled...

9.1CVSS7.3AI score0.02655EPSS
SaveExploits2References19
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/06 6:44 a.m.11 views

Security Bulletin: IBM Quantum Safe Remediator is affected by mutiple vulnerabilities

Summary The vulnerabilities are found in the dependent open source libraries used in IBM Quantum Safe Remediator code base. IBM Quantum Safe Remediator has addressed these vulnerabilities by updating the versions of the affected libraries. Vulnerability Details CVEID:CVE-2026-39824 DESCRIPTION:...

9.3CVSS6.4AI score0.00492EPSS
SaveExploits2Affected Software1
OSV
OSV
added 2026/07/06 5:48 a.m.6 views

BIT-ELASTICSEARCH-2026-56148 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted query that causes excessive resource consumption while the request is processed, which may render the affected node unavailable...

6.5CVSS6AI score0.00347EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/06 2:16 a.m.8 views

DEBIAN-CVE-2026-14803

Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. The pure-Perl decode path decodevalue dispatching to decodearray and decodeobject recurses with no depth limit, so a small deeply nested JSON document can consume excessive memory...

6.5CVSS6AI score0.00331EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/06 2:16 a.m.13 views

CVE-2026-14803

Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. The pure-Perl decode path decodevalue dispatching to decodearray and decodeobject recurses with no depth limit, so a small deeply nested JSON document can consume excessive memory...

6.5CVSS0.00331EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/06 2:16 a.m.7 views

UBUNTU-CVE-2026-14803

Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. The pure-Perl decode path decodevalue dispatching to decodearray and decodeobject recurses with no depth limit, so a small deeply nested JSON document can consume excessive memory...

6.5CVSS6AI score0.00331EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/06 1:34 a.m.29 views

CVE-2026-14803

Mojo::JSON prior to version 9.47 is vulnerable to memory exhaustion due to unbounded recursion in the pure-Perl JSON decoder (_decode_value -> _decode_array/_decode_object). The issue arises when the pure-Perl path is used (default if Cpanel::JSON::XS is not installed or MOJO_NO_JSON_XS=1); a ...

6.5CVSS6AI score0.00331EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/06 1:34 a.m.13 views

EUVD-2026-41798

Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. The pure-Perl decode path decodevalue dispatching to decodearray and decodeobject recurses with no depth limit, so a small deeply nested JSON document can consume excessive memory...

6.5CVSS6AI score0.00331EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/06 1:34 a.m.42 views

CVE-2026-14803 Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder

Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. The pure-Perl decode path decodevalue dispatching to decodearray and decodeobject recurses with no depth limit, so a small deeply nested JSON document can consume excessive memory...

0.00331EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/06 1:34 a.m.9 views

CVE-2026-14803

Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. The pure-Perl decode path decodevalue dispatching to decodearray and decodeobject recurses with no depth limit, so a small deeply nested JSON document can consume excessive memory...

6AI score0.00331EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/07/06 1:34 a.m.7 views

CVE-2026-14803

Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. The pure-Perl decode path decodevalue dispatching to decodearray and decodeobject recurses with no depth limit, so a small deeply nested JSON document can consume excessive memory...

6.5CVSS6AI score0.00331EPSS
SaveExploits0
OSV
OSV
added 2026/07/06 1:34 a.m.7 views

CVE-2026-14803 Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder

Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. The pure-Perl decode path decodevalue dispatching to decodearray and decodeobject recurses with no depth limit, so a small deeply nested JSON document can consume excessive memory...

6.5CVSS6AI score0.00331EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.20 views

PT-2026-55851

Name of the Vulnerable Software and Affected Versions Mojo::JSON versions prior to 9.47 Description The pure-Perl decoder allows memory exhaustion due to unbounded recursion. Specifically, the decode path where decode value dispatches to decode array and decode object lacks a depth limit, enablin...

6.5CVSS6AI score0.00331EPSS
SaveExploits0References6
Redos
Redos
added 2026/07/06 12:0 a.m.7 views

ROS-20260706-73-0035

The vulnerability of the negotiation mechanisms for SSL and GSS in the PostgreSQL database management system is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...

7.5CVSS7.1AI score0.00471EPSS
SaveExploits0
Redos
Redos
added 2026/07/06 12:0 a.m.6 views

ROS-20260706-73-0037

The vulnerability of the negotiation mechanisms for SSL and GSS in the PostgreSQL database management system is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...

7.5CVSS7.1AI score0.00471EPSS
SaveExploits0
Redos
Redos
added 2026/07/06 12:0 a.m.7 views

ROS-20260706-73-0034

The vulnerability of the negotiation mechanisms for SSL and GSS in the PostgreSQL database management system is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...

7.5CVSS7.1AI score0.00471EPSS
SaveExploits0
Redos
Redos
added 2026/07/06 12:0 a.m.7 views

ROS-20260706-73-0033

The vulnerability of the negotiation mechanisms for SSL and GSS in the PostgreSQL database management system is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...

7.5CVSS7.1AI score0.00471EPSS
SaveExploits0
Redos
Redos
added 2026/07/06 12:0 a.m.6 views

ROS-20260706-73-0036

The vulnerability of the negotiation mechanisms for SSL and GSS in the PostgreSQL database management system is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...

7.5CVSS7.1AI score0.00471EPSS
SaveExploits0
OSV
OSV
added 2026/07/03 12:17 p.m.4 views

SUSE-SU-2026:22664-1 Security update for jq

This update for jq fixes the following issues: - CVE-2026-32316: integer overflow within the jvpstringappend and jvpstringcopyreplacebad functions can lead to heap buffer overflow when evaluating untrusted jq queries bsc1262044. - CVE-2026-33947: unbounded recursion in functions jvsetpath,...

8.2CVSS6AI score0.00559EPSS
SaveExploits9References21
Vulnrichment
Vulnrichment
added 2026/07/02 4:6 p.m.14 views

CVE-2026-54886 SSH SFTP server denial of service via extended channel data infinite loop

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Erlang OTP ssh sshsftpd module allows an authenticated SFTP user to render an SFTP channel permanently unresponsive. The handledata/4 function in sshsftpd contains a catch-all clause that accepts channel data of any type. When...

5.3CVSS6.1AI score0.00331EPSS
SaveExploits0References5
Rows per page
Query Builder