Lucene search
+L

5702 matches found

OSV
OSV
added 2026/04/29 10:12 p.m.7 views

GHSA-6V9C-7CG6-27Q7 Marked Vulnerable to OOM Denial of Service via Infinite Recursion in marked Tokenizer

Summary A critical Denial of Service DoS vulnerability exists in [email protected]. By providing a specific 3-byte input sequence a tab, a vertical tab, and a newline \x09\x0b\n—an unauthenticated attacker can trigger an infinite recursion loop during parsing. This leads to unbounded memory allocatio...

8.7CVSS5.8AI score0.00342EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2026/04/29 10:12 p.m.9 views

Marked Vulnerable to OOM Denial of Service via Infinite Recursion in marked Tokenizer

Summary A critical Denial of Service DoS vulnerability exists in [email protected]. By providing a specific 3-byte input sequence a tab, a vertical tab, and a newline \x09\x0b\n—an unauthenticated attacker can trigger an infinite recursion loop during parsing. This leads to unbounded memory allocatio...

8.7CVSS5.7AI score0.00342EPSS
SaveExploits1References3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/29 9:7 a.m.5 views

Security Bulletin: IBM Engineering Lifecycle Management - Jazz Foundation is impacted by vulnerabilities in Json-smart

Summary A vulnerability has been identified in Json-smart library, which is used in IBM Engineering Lifecycle Management - Jazz Foundation. Vulnerability Details CVEID:CVE-2023-1370 DESCRIPTION:Json-smart is a performance focused, JSON processor lib. When reaching a ‘‘ or ‘‘ character in the JSON...

7.5CVSS6.3AI score0.01119EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2026/04/29 8:50 a.m.6 views

BIT-THRIFT-2026-41636 Apache Thrift: Node.js skip() recursion

Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

8.7CVSS5.3AI score0.00451EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/29 8:50 a.m.16 views

BIT-THRIFT-2026-41606 Apache Thrift: c_glib dispatch stack overflow

Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.5CVSS5.3AI score0.01101EPSS
SaveExploits0References13
OSV
OSV
added 2026/04/29 6:59 a.m.18 views

CLSA-2026-1777444367 vim: Fix of 9 CVEs

CVE-2021-3903: do not set VALIDBOTLINE in wvalid when the screen is not valid, preventing invalid memory access while scrolling. - CVE-2021-4069: copy the current line before regexec in exopen so the match is not using freed memory when searching for a mark flushes it. - CVE-2022-0351: limit...

9.8CVSS7.3AI score0.01462EPSS
SaveExploits8References1
OSV
OSV
added 2026/04/29 6:0 a.m.9 views

RLSA-2026:11349 Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c CVE-2025-9714 For more details about the security issues, including the impact, a CVSS...

6.2CVSS5.3AI score0.00144EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2026/04/29 6:0 a.m.24 views

libxml2 security update

An update is available for libxml2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libxml2 library is a development toolbox providing the implementation of...

6.2CVSS5.4AI score0.00144EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/04/29 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-41636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to...

8.7CVSS7.2AI score0.00451EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
added 2026/04/29 12:0 a.m.10 views

FreeBSD Security Advisory - FreeBSD-SA-26:14.pf

FreeBSD Security Advisory - Incorrect packet validation allowed unbounded recursion parsing SCTP chunk parameters. This can eventually result in a stack overflow and panic...

7.5CVSS5.2AI score0.00432EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/04/29 12:0 a.m.18 views

RHEL 8 : libxml2 (RHSA-2026:11349)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:11349 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxslt: libxml2: Inifinite...

6.2CVSS5.4AI score0.00144EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/04/29 12:0 a.m.7 views

RockyLinux 8 : libxml2 (RLSA-2026:11349)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:11349 advisory. libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c CVE-2025-9714 Tenable has extracted the preceding description block...

6.2CVSS5.3AI score0.00144EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/29 12:0 a.m.15 views

AlmaLinux 8 : libxml2 (ALSA-2026:11349)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:11349 advisory. libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c CVE-2025-9714 Tenable has extracted the preceding description block...

6.2CVSS5.3AI score0.00144EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/28 3:22 p.m.18 views

CLSA-2026-1777389760 vim: Fix of 9 CVEs

CVE-2021-3903: do not set VALIDBOTLINE in wvalid when the screen is not valid, preventing invalid memory access while scrolling. - CVE-2021-4069: copy the current line before regexec in exopen so the match is not using freed memory when searching for a mark flushes it. - CVE-2022-0351: limit...

9.8CVSS7.3AI score0.01462EPSS
SaveExploits8References1
Patchstack
Patchstack
added 2026/04/28 12:31 p.m.11 views

NPM: Apache Thrift Node.js bindings vulnerable to Uncontrolled Recursion

NPM: Apache Thrift Node.js bindings vulnerable to Uncontrolled Recursion vulnerability discovered by ? in WordPress Npm thrift versions 0.23.0...

8.7CVSS5.8AI score0.00451EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/04/28 12:31 p.m.8 views

GHSA-R67J-R569-JRWP Apache Thrift Node.js bindings vulnerable to Uncontrolled Recursion

Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

8.7CVSS5.8AI score0.00451EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/04/28 12:31 p.m.14 views

Apache Thrift Node.js bindings vulnerable to Uncontrolled Recursion

Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

8.7CVSS5.8AI score0.00451EPSS
SaveExploits0References4Affected Software1
RedHat Linux
RedHat Linux
added 2026/04/28 11:27 a.m.6 views

libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c

A flaw was found in libxstl/libxml2. The 'exsltDynMapFunction' function in libexslt/dynamic.c does not contain a recursion depth check, which may cause an infinite loop via a specially crafted XSLT document while handling 'dyn:map', leading to stack exhaustion and a local denial of service...

6.2CVSS5.1AI score0.00144EPSS
SaveExploits0References6
Snyk
Snyk
added 2026/04/28 11:19 a.m.8 views

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion due to uncontrolled recursion in the skip function. An attacker can cause a stack overflow and potentially crash the application by sending specially crafted input that triggers deep recursion. Remediation Upgrade...

8.7CVSS5.9AI score0.00451EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/04/28 11:19 a.m.6 views

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion due to uncontrolled recursion in the dispatch process. An attacker can cause a stack overflow and potentially crash the application by sending specially crafted input that triggers excessive recursive calls...

8.7CVSS5.9AI score0.01101EPSS
SaveExploits0References2
Rows per page
Query Builder