Lucene search
+L

9596 matches found

EUVD
EUVD
added yesterday5 views

EUVD-2026-63746

Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...

6.7CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added yesterday5 views

EUVD-2026-63660

Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows an unauthenticated remote attacker to pin an unbounded number of HTTP/2 stream processes indefinitely via connection-level flow control. When a stream's response body outruns the HTTP/2 connection-level se...

8.7CVSS5.5AI score
SaveExploits0References4
EUVD
EUVD
added yesterday5 views

EUVD-2026-63423

Monkeytype is a minimalistic and customizable typing test. In 26.26.0 and earlier, the backend rate-limit key generator in backend/src/middlewares/rate-limit.ts uses client-controlled cf-connecting-ip and x-forwarded-for headers before the trust-proxy-derived req.ip value. An unauthenticated...

7.5CVSS5.5AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added yesterday3 views

tar: node-tar: Denial of Service via crafted gzip bomb

A flaw was found in node-tar, a tar archive manipulation library for Node.js. This vulnerability allows a remote attacker to craft a small gzip bomb, which, when processed, can lead to the exhaustion of disk space and CPU resources. This occurs because node-tar does not enforce strict limits on t...

9.2CVSS6.8AI score0.00424EPSS
SaveExploits1References7
CVE
CVE
added yesterday11 views

CVE-2026-75140

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...

8.7CVSS5.5AI score
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added yesterday2 views

Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed in IBM Business Automation Manager Open Editions 9.5.2 Vulnerability Details CVEID:CVE-2026-62389 DESCRIPTION: Rejected reason: This CVE ID has been rejected or withdrawn b...

8.7CVSS6.5AI score0.00691EPSS
SaveExploits2Affected Software1
NVD
NVD
added yesterday4 views

CVE-2026-73196

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

4.3CVSS
SaveExploits0References2
Cvelist
Cvelist
added yesterday12 views

CVE-2026-73196 Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

4.3CVSS
SaveExploits0References2
EUVD
EUVD
added yesterday6 views

EUVD-2026-63241

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

4.3CVSS5.4AI score
SaveExploits0References2
CVE
CVE
added yesterday11 views

CVE-2026-73196

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

4.3CVSS5.4AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-73196

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

4.3CVSS5.5AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added yesterday3 views

kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests

A flaw was found in the Linux kernel's pcrypt component. This vulnerability involves how the system handles certain requests, specifically MAYBACKLOG requests, which can indicate a temporary busy state. If not properly managed, the system's processing of these requests could lead to resource...

9.8CVSS5.6AI score0.00554EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added yesterday2 views

PT-2026-79146

Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows an unauthenticated remote attacker to pin an unbounded number of HTTP/2 stream processes indefinitely via connection-level flow control. When a stream's response body outruns the HTTP/2 connection-level se...

8.7CVSS5.5AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added yesterday5 views

PT-2026-79066

Monkeytype is a minimalistic and customizable typing test. In 26.26.0 and earlier, the backend rate-limit key generator in backend/src/middlewares/rate-limit.ts uses client-controlled cf-connecting-ip and x-forwarded-for headers before the trust-proxy-derived req.ip value. An unauthenticated...

7.5CVSS5.5AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added yesterday10 views

PT-2026-79054

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...

7.5CVSS5.5AI score
SaveExploits0References4
NVD
NVD
added 2 days ago5 views

CVE-2026-16831

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

7.5CVSS
SaveExploits0References1
EUVD
EUVD
added 2 days ago9 views

EUVD-2026-62837

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, BuildKit read attacker-controlled /etc/passwd and /etc/group files without an upper bound while resolving a username to a user identifier or group identifier in...

2.3CVSS5.3AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2 days ago5 views

CVE-2026-74560

A flaw was found in the Linux kernel's AFXDP Address Family eXpress Data Path subsystem. When handling multi-buffer transmissions, the xskdropskb function incorrectly cancels completion queue CQ reservations without submitting buffer addresses to the CQ. This leads to a buffer leak where userspac...

5.5CVSS5.8AI score0.00155EPSS
SaveExploits0References4
NVD
NVD
added 2 days ago5 views

CVE-2026-73541

Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, denying service to legitimate payers once it is empty. MPP.Methods.Tempo.FeePayerPolicy enforces its ceilings maxgas,...

8.3CVSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2 days ago8 views

Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in Netty

Summary IBM SPSS Analytic Server is affected by multiple vulnerabilities in Netty. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-59899 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and...

8.7CVSS7.8AI score0.00466EPSS
SaveExploits3Affected Software1
Rows per page
Query Builder