21 matches found
Security Bulletin: Due to the use of Netty IBM webMethods Managed File Transfer is vulnerable to Improper Access Control and Allocation of Resources without Limits or Throttling
Summary Multiple vulnerabilities in Netty used by IBM webMethods Managed File Transfer have been addressed in MAT11.1ServerFix5 and MAT12.1ServerFix1 Vulnerability Details CVEID:CVE-2026-42580 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final...
CVE-2026-45664
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...
GHSA-G5MF-WQQ5-VWG6 ImageMagick: Policy Bypass in MNG coder could
Because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...
The vulnerability of the Entry.Writer() function in the Logrus logging library, which allows a hacker to cause a service failure
The vulnerability of the Entry.Writer function in the Logrus logging library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
SUSE SLES12: libxml2-2 / libxml2-2-32bit / libxml2-devel / libxml2-doc / etc (SUSE-SU-2026:0782-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0782-1 advisory. - CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in xmlCatalogXMLResolveURI. bsc1256807,...
PT-2025-51370
Name of the Vulnerable Software and Affected Versions CHOCO TEI WATCHER mini IB-MCT001 affected versions not specified Description The CHOCO TEI WATCHER mini IB-MCT001 has a problem with how it handles unusual situations. Specifically, when the Video Download feature is operating in a particular...
The vulnerability in the soc-pcm.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the soc-pcm.c component in the Linux operating system’s kernel is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a perpetrator to cause service failures...
CVE-2025-30476
Dell PowerScale InsightIQ, version 5.2, contains an uncontrolled resource consumption vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service...
Vulnerability of the Server component: Security: Privileges of the MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the MySQL Server component relates to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause downtime or service failures using the MySQL network protocol...
The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through specially created API requests...
The vulnerability of JetBrains Toolbox’s tool set is related to uncontrolled resource consumption, allowing attackers to trigger service failures.
The vulnerability of the JetBrains Toolbox suite of tools is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures using SVG images...
The vulnerability of the `loadRepoIndex()` function in the declarative tool for continuous delivery of GitOps for Kubernetes Argo CD allows a malicious actor to trigger a service failure.
The vulnerability of the loadRepoIndex function in the declarative tool for continuous delivery of GitOps for Kubernetes Argo CD is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
SUSE CVE-2023-6476
A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specify and get any amount of memory/cpu, circumventing the kubernetes scheduler and potentially resulting in a denial of service in the node...
The vulnerability of the Squid proxy server is related to improper handling of exclusive conditions and uncontrolled resource consumption, allowing attackers to cause service failures.
The vulnerability of the Squid proxy server is related to the limitations applied to the checking of HTTP response headers before caching. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
Adobe Acrobat Reader DC 资源管理错误漏洞
Adobe Acrobat Reader DC is a Pdf reading tool from the American company Audobee Adobe. Used to reliably view, print and annotate Pdf documents. Adobe Acrobat Reader DC suffers from a Resource Management Error vulnerability that arises from uncontrolled resource consumption by the application, whi...
The vulnerability of the Routing Protocol Demon (rpd) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause a service failure.
The vulnerability of the Routing Protocol Demon rpd in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to memory release errors, as well as unlimited resource allocation. Exploiting this vulnerability can allow an attacker to trigger a service failure by executing a...
The vulnerability of Junos router operating systems of the EX4300-MP, EX4600, and QFX5K series is related to an uncontrolled resource consumption, which allows a attacker to cause service interruptions.
The vulnerability of Junos operating system routers of the EX4300-MP, EX4600, and QFX5K series is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by using specially crafted channel layer...
The vulnerability of the 389 Directory Server, a catalog service server, related to uncontrolled resource consumption, allows attackers to cause system failures.
The vulnerability of the 389 Directory Server catalog service server is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a malfunction in the server’s operation due to the ldapsearch sorting on the server si...
Vulnerability of the adis_update_scan_mode_burst() function (drivers/iio/imu/adis_buffer.c) in the Linux kernel, allowing a hacker to trigger a service failure
The vulnerability of the adisupdatescanmodeburst function drivers/iio/imu/adisbuffer.c in the Linux kernel involves uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the Chassis Manager (CMLC) component of the JunOS operating system, which allows a hacker to trigger a maintenance failure.
The vulnerability of the Chassis Manager CMLC component in the JunOS operating system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...