Lucene search
+L

9581 matches found

NVD
NVD
added 3 hours ago3 views

CVE-2026-73196

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

4.3CVSS
SaveExploits0References2
EUVD
EUVD
added 4 hours ago6 views

EUVD-2026-63241

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

4.3CVSS5.4AI score
SaveExploits0References2
CVE
CVE
added 4 hours ago7 views

CVE-2026-73196

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

4.3CVSS5.4AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 4 hours ago2 views

CVE-2026-73196

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

4.3CVSS5.5AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 8 hours ago3 views

kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests

A flaw was found in the Linux kernel's pcrypt component. This vulnerability involves how the system handles certain requests, specifically MAYBACKLOG requests, which can indicate a temporary busy state. If not properly managed, the system's processing of these requests could lead to resource...

9.8CVSS5.6AI score0.00554EPSS
SaveExploits0References5
NVD
NVD
added yesterday5 views

CVE-2026-16831

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

7.5CVSS
SaveExploits0References1
EUVD
EUVD
added yesterday9 views

EUVD-2026-62837

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, BuildKit read attacker-controlled /etc/passwd and /etc/group files without an upper bound while resolving a username to a user identifier or group identifier in...

2.3CVSS5.3AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-74560

A flaw was found in the Linux kernel's AFXDP Address Family eXpress Data Path subsystem. When handling multi-buffer transmissions, the xskdropskb function incorrectly cancels completion queue CQ reservations without submitting buffer addresses to the CQ. This leads to a buffer leak where userspac...

5.5CVSS5.8AI score0.00155EPSS
SaveExploits0References4
NVD
NVD
added yesterday4 views

CVE-2026-73541

Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, denying service to legitimate payers once it is empty. MPP.Methods.Tempo.FeePayerPolicy enforces its ceilings maxgas,...

8.3CVSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added yesterday5 views

CVE-2026-72465

A flaw was found in the Linux kernel's xprtrdma component. A remote attacker can exploit this by sending specially crafted RPC over RDMA replies containing an inflated credit grant. This vulnerability can lead to excessive allocation of Receive Work Requests, potentially causing a Denial of Servi...

7.5CVSS5.6AI score0.00655EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added yesterday3 views

GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering

A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input...

5.3CVSS5.7AI score0.00192EPSS
SaveExploits0References5
EUVD
EUVD
added yesterday12 views

EUVD-2026-62593

Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, denying service to legitimate payers once it is empty. MPP.Methods.Tempo.FeePayerPolicy enforces its ceilings maxgas,...

8.3CVSS5.5AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added yesterday5 views

CVE-2026-73541 Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drain

Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, denying service to legitimate payers once it is empty. MPP.Methods.Tempo.FeePayerPolicy enforces its ceilings maxgas,...

8.3CVSS5.4AI score
SaveExploits0References4
OSV
OSV
added yesterday6 views

EEF-CVE-2026-73541 Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drain

Summary Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, denying service to legitimate payers once it is empty. MPP.Methods.Tempo.FeePayerPolicy enforces its ceilings...

8.3CVSS5.5AI score
SaveExploits0References4
CVE
CVE
added yesterday13 views

CVE-2026-73541

Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, denying service to legitimate payers once it is empty. MPP.Methods.Tempo.FeePayerPolicy enforces its ceilings maxgas,...

8.3CVSS5.5AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added yesterday5 views

CVE-2026-72495

A flaw was found in the Linux kernel's RDMA/bnxtre component. A local attacker could exploit this vulnerability by repeatedly requesting Work Completion WC pages for the same user context ucontext, exceeding the supported limit of one page per context. This could lead to concurrent access issues...

9.3CVSS5.4AI score0.00178EPSS
SaveExploits0References4
Cvelist
Cvelist
added yesterday21 views

CVE-2026-16690 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

7.5CVSS
SaveExploits0References1
CVE
CVE
added yesterday9 views

CVE-2026-16690

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 are vulnerable to uncontrolled resource consumption, allowing an unauthenticated remote attacker to cause denial of service (CVSS 7.5, HIGH). No exploit details are provided; IBM's support page is referenced for remediation guidance. Monitor for vendor patch...

7.5CVSS5.3AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-72434

A flaw was found in the Linux kernel's netfilter ipset component. When destroying a set, the garbage collection gc mechanism may not be properly stopped due to an unconditional call to queuedelayedwork while canceldelayedworksync is called. This improper shutdown can lead to resource exhaustion,...

7.8CVSS5.4AI score0.00163EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added yesterday3 views

CVE-2026-66257

A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit an issue with unbounded symbol value caching. This could lead to resource exhaustion, where the system runs out of available resources, ultimately causing a denial of service DoS. A denial ...

7.5CVSS5.4AI score0.00426EPSS
SaveExploits0References4
Rows per page
Query Builder