ROS-20260819-73-0068

The vulnerability of the nghttpx component in the nghttp2 library is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

CVE-2026-18671

IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server thread exception, caused by an integer overflow during bounds checking in request processing. The attacker could exploit this vulnerability to cause a temporary denial of service...

CVE-2026-20349

The CVE-2026-20349 issue affects Cisco Secure Firewall ASA/FTD Remote Access SSL VPN, caused by insufficient error checking when processing HTTP requests. An unauthenticated, remote attacker can send a crafted HTTP request to the VPN service and cause the device to reload, triggering a denial-of-...

The vulnerability of the HttpObjectDecoder decoder, a framework for developing network applications, servers, and clients using the Netty protocol, allows a attacker to cause a service failure.

The vulnerability of the HttpObjectDecoder decoder, a framework for developing network applications, servers, and clients using the Netty protocol, is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the net/http.Transport component, which is used by the Containous Traefik reverse proxy server, allows attackers to disclose sensitive information that should be protected.

The vulnerability of the net/http.Transport component, which is used by the Containous Traefik reverse proxy server, is related to HTTP request processing flaws. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

The vulnerability of the Font component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Font component in Google Chrome and Microsoft Edge relates to errors in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

The vulnerability of the UPDATE service for the ONLYOFFICE Desktop Editors allows a hacker to execute arbitrary code.

The vulnerability of the ONLYOFFICE Desktop Editors office package lies in the lack of validation during the processing of incoming requests. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Vulnerabilities are handled in GitLab through GitLab Inc.

GitLab Inc. has addressed several vulnerabilities in GitLab, particularly in versions prior to 19.0.5, 19.1.3, and 19.2.1, including those of the GitLab Enterprise Edition EE. These vulnerabilities concern various aspects of GitLab: - Improper access control, allowing authenticated users to acces...

EUVD-2026-49572

JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level...

CVE-2026-66014 Potential authentication bypass leading to privilege escalation in Artifactory

JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level...

CVE-2026-66014

JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level...

CVE-2026-66014: Improper Authentication

JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level...

ROS-20260723-73-0017

The vulnerability in Chromium is related to errors in HTTP requests processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Allocation of Resources Without Limits or Throttling

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the processing of oversized request payloads. An attacker can exhaust...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via HTTP/2 request processing. An attacker can cause a denial of service by sending crafted HTTP/2 traffic that triggers an out-of-memory condition, exhausting available memory and...

The vulnerability of the DefaultHttpRequest and DefaultFullHttpRequest classes in the Netty framework for developing network applications, servers, and client protocols allows a attacker to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the DefaultHttpRequest and DefaultFullHttpRequest classes in the Netty framework for developing network applications, servers, and client protocols is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTT...

The vulnerability of the nghttpx component in the nghttp2 library, which allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the nghttpx component in the nghttp2 library is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the DNS request processing mechanism in the BIND DNS server’s named daemon allows a attacker to cause a service failure.

The vulnerability of the DNS request processing mechanism in the BIND DNS server’s named daemon is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20260624-73-0021

The vulnerability in Netty is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to send hidden HTTP requests a type of HTTP request smuggling attack...

ROS-20260624-73-0026

The vulnerability in Netty is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to send hidden HTTP requests a type of HTTP request smuggling attack...