107994 matches found
CVE-2026-50525
A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service DoS. An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash...
CVE-2026-57108
A flaw was found in .NET Core. This vulnerability, known as type confusion, allows an unauthorized remote attacker to cause a denial of service DoS over a network. By exploiting this flaw, an attacker can make the affected system unavailable to legitimate users...
CVE-2026-47304
A flaw was found in .NET. An unauthorized attacker can exploit this vulnerability over a network due to improper verification of cryptographic signatures. This allows the attacker to bypass a critical security feature, potentially leading to significant compromise of confidentiality, integrity, a...
CVE-2026-41839
A flaw was found in Spring Framework. A remote attacker, by compromising a subdomain of a WebFlux application for example, through cross-site scripting XSS, could exploit this vulnerability to escalate privileges. This allows the attacker to exchange a known session ID for that of an authenticate...
kernel: net: sched: act_csum: validate nested VLAN headers
A flaw was found in the Linux kernel's network scheduler component. A remote attacker could send specially crafted network packets containing nested Virtual Local Area Network VLAN headers. This could cause the kernel to read beyond allocated memory, leading to a system crash and a denial of...
CVE-2026-53366
A flaw was found in the Linux kernel's handling of IPv4 network packets. An error in how the kernel accounts for fragmented data during memory allocation can lead to an undersized memory buffer. This memory handling issue could potentially be exploited by a remote attacker to cause a system crash...
CVE-2026-34150
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap buffer overflow in wazuh-analysisd allows an unauthenticated remote attacker to crash the Wazuh manager's analysis engine, causing complete loss of SI...
ROS-20260717-73-0038
The vulnerability of the Resource Timing application programming interface in Google Chrome and Microsoft Edge browsers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected informati...
The vulnerability of the console-based graphic editor ImageMagick, related to reading beyond the buffer in memory, allows a hacker to cause a system failure.
The vulnerability of the console-based graphic editor ImageMagick is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the decoder in the console-based ImageMagick graphics editor allows a hacker to trigger a service failure.
The vulnerability of the MAT decoder in the console-based ImageMagick graphics editor is related to reading data outside of the permitted range in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
PT-2026-60880
Name of the Vulnerable Software and Affected Versions MCMS version 6.1.1 Description A remote attacker can obtain sensitive information by exploiting the source parameter. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
The vulnerability of the MSL encoder in the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure.
The vulnerability of the MSL encoder in the console-based image editing tool ImageMagick relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the freerdp_certificate_data_hash_() function in the RDP client FreeRDP allows a hacker to trigger a service failure.
The vulnerability of the freerdpcertificatedatahash function in the RDP client FreeRDP is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
CVE-2026-52203
CVE-2026-52203 concerns MCMS 6.1.1 where a remote attacker can obtain sensitive information via the source parameter. The available documents consistently identify MCMS v6.1.1 as affected and describe information disclosure as the outcome. CVSS metrics (from the initial entry) indicate a Network ...
PT-2026-60843
Name of the Vulnerable Software and Affected Versions IBM Engineering AI Hub versions 1.0.0 through 1.2.0 Description Improper neutralization of input during web page generation allows a remote attacker to execute arbitrary scripts. This issue is a Cross-Site Scripting XSS flaw, where malicious...
The vulnerability of the ainput_send_input_event() function in the RDP client FreeRDP allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the ainputsendinputevent function in the RDP client FreeRDP relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary code...
PT-2026-60844
Name of the Vulnerable Software and Affected Versions IBM Engineering AI Hub versions 1.0.0 through 1.2.0 Description Improper validation of user-supplied URLs allows a remote attacker to redirect users to malicious websites. Recommendations At the moment, there is no information about a newer...
CVE-2026-33754
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.9.0 and above, prior to 4.14.5, a remote attacker can trigger memory exhaustion in the cluster protocol parser by sending a crafted message header with an arbitrarily large payload length...