50515 matches found
PT-2026-84730
Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user with low-level privileges could submit a specially crafted request that causes Kibana to consume an unbounded amount of memory, renderin...
CVE-2026-84326
Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
ROS-20260902-73-0019
The vulnerability in python-pyasn1 is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
PT-2026-84883
A vulnerability was determined in simular-ai Agent-S up to 0.3.2. Affected by this vulnerability is the function ImageData of the file gui agents/s1/utils/ocr server.py of the component OCR HTTP API. Executing a manipulation of the argument img bytes can lead to resource consumption. The attack m...
PT-2026-84748
Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Incorrect Authorization in the machine learning feature allows an authenticated user to invoke functionality beyond their authorized scope. This can lead to unauthorized resource consumption o...
ROS-20260902-73-0029
The vulnerability in ElasticSearch is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of AI components in Google Chrome and Microsoft Edge web browsers, which allows a hacker to trigger a service failure
The vulnerability of AI-powered web browsers Google Chrome and Microsoft Edge relates to improper resource relocation between different areas of the system. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
The vulnerability of the USB component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service interruptions through a specially created HTML...
PT-2026-84839
A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Affected by this vulnerability is an unknown functionality of the file packages/core/src/agent/agent.ts of the component Browser Agent Message Construction. Performing a manipulation results in...
PT-2026-84806
Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description An improper resource control issue exists within the software, which could lead to a security compromise. This issue is categorized under CWE-664, which refers to an improper...
PT-2026-84734
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in the Kibana Fleet feature can lead to the unauthorized deletion of resources via Path Traversal CAPEC-126. A low-privileged user could cause a subsequent action taken by a higher-privileged user in the Fleet...
Linux Distros Unpatched Vulnerability : CVE-2026-84326
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML...
Linux Distros Unpatched Vulnerability : CVE-2026-84375
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2 and 4.3.2, maxTotalMergeKeys in lib/js-yaml/loader.js and lib/loader.js does not count...
ROS-20260902-73-0007
The vulnerability in mongodb-org is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the GetUserMedia component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the GetUserMedia component in Google Chrome and Microsoft Edge relates to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service interruptions through a specially created HTML pag...
ROS-20260902-73-0024
The vulnerability in trivy is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...
MiracleLinux 9 : iperf3-3.9-17.el9_8.1 (AXSA:2026-1734:06)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1734:06 advisory. iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion CVE-2026-71217 Tenable has...
CVE-2026-84326
An uninitialized resource in the V8 engine within Google Chrome (prior to version 152.0.7977.75) allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability also affects Microsoft Edge (Chromium-based) and other Chromium-based browsers. Potent...
