148 matches found
CVE-2026-113650
A flaw was found in sanitize-html. A remote attacker can cause a Denial of Service DoS by submitting specially crafted HTML input containing disallowed iframe elements. Under default configurations, the library re-sanitizes iframe content through unbounded recursive calls, exhausting system...
CVE-2026-106449
A flaw was found in lz4-java. This issue can lead to a Denial of Service DoS when the LZ4 input stream is configured not to stop upon encountering empty blocks. In this non-default configuration, consecutive empty blocks are processed via recursive calls rather than iterative handling. A remote...
CVE-2026-72705
The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's own arguments. A fixpoint may pass itself as a higher-order argument to a second fixpoint, which then applies it to a value that is not a subterm of the structural argument. Passing the recursive function t...
CVE-2026-54269
A flaw was found in protobufjs, a JavaScript JS library for compiling protobuf definitions. A remote attacker could exploit this vulnerability by providing specially crafted protobuf definitions or message types that contain names colliding with internal protobufjs runtime helpers. This could lea...
CVE-2019-20016
libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in fractalhead.c. NOTE: a download of v0.9 after 2019-12-06 should fully remediate this issue...
EUVD-2025-200073
Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls...
CVE-2025-40206: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftobjref: validate objref and objrefmap expressions Referencing a synproxy stateful object from OUTPUT hook causes kernel crash due to infinite recursive calls: BUG: TASK stack guard page was hit at 000000008bda5b8c...
CLSA-2025-1760020311 Fix CVE(s): CVE-2025-9714
SECURITY UPDATE: uncontrolled recursion leading to stack overflow via crafted XPath expressions - debian/patches/CVE-2025-9714.patch: Make XPath depth check work with recursive invocations to prevent stack overflows - CVE-2025-9714...
EUVD-2018-11555
Malware in sbrugna...
EUVD-2011-4864
Malware in sbrugna...
EUVD-2014-4257
Malware in sbrugna...
EUVD-2021-17393
Malware in sbrugna...
EUVD-2018-9724
Malware in sbrugna...
EUVD-2018-9759
Malware in sbrugna...
EUVD-2019-10572
Malware in sbrugna...
EUVD-2019-19259
Malware in sbrugna...
EUVD-2019-18457
Malware in sbrugna...
EUVD-2019-6935
Malware in sbrugna...