115084 matches found
openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server
A flaw was found in OpenSSL. A remote attacker could exploit this by sending a large number of QUIC Initial packets to an OpenSSL QUIC server. This can cause the server to allocate and queue new incoming channels without limit, leading to unbounded memory growth. The excessive memory consumption...
CVE-2026-90679
A flaw was found in Forgejo when federation is enabled. This issue allows a remote attacker to spoof identities by submitting signature-valid ActivityPub activities attributed to any actor identity. The system fails to verify that the HTTP Signature on an incoming ActivityPub activity was produce...
CVE-2026-90584
A flaw was found in TooTallNate Java-WebSocket. A remote attacker can exploit a weakness in the processFrameContinuousAndNonFin function within the Fragmentation Handler component. This vulnerability allows for excessive allocation of resources, which can lead to a Denial of Service DoS condition...
CVE-2026-82778
An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the directory list without authentication...
CVE-2026-82782
Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...
CVE-2026-82787
CVE-2026-82787 affects the CPSL-08P1EN (a Contec product) with a missing authentication for critical function vulnerability. A remote attacker may operate the affected product without authentication , leading to high impact on confidentiality, integrity, and availability. The vulnerability is rat...
CVE-2026-82787
Missing authentication for critical function vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an affected product may be operated by a remote attacker without authentication...
CVE-2026-82787
Missing authentication for critical function vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an affected product may be operated by a remote attacker without authentication...
EUVD-2026-77238
Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit Server Type CPSN-MCB271-. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...
CVE-2026-82782
Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...
CVE-2026-82782
An out-of-bounds write vulnerability in CONPROSYS nano Series (Contec) allows a remote attacker with low privileges to send a specially crafted request that triggers a denial-of-service condition. The CVSS 3.1 score is 4.3 (MEDIUM) and CVSS 4.0 is 5.3 (MEDIUM) , reflecting a network-based attack ...
CVE-2026-82782
Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...
EUVD-2026-77235
Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...
CVE-2026-82778
An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the directory list without authentication...
CVE-2026-82775
CVE-2026-82775 is an exposure-of-information vulnerability in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series (CONTEC). Accessing a specific URL allows a remote unauthenticated attacker to retrieve a directory listing, potentially revealing sensitive file or folder structure. The...
tomcat-coyote: tomcat: Improper Authorization allows security bypass
In Apache Tomcat, when multiple security constraints defined an HTTP method constraint for the same extension pattern, only the first method constraint was applied. A remote attacker could exploit this to bypass intended security restrictions for information or actions within the application...
CVE-2023-22631
PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor...
net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service
A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...
PT-2026-91435
IBM Cloud Pak for Data System Yosemite 1.0 3.0.5.2 could allow a remote attacker to obtain sensitive information due to the use of weak or deprecated cryptographic protocols...