60190 matches found
CVE-2026-55248: Uncontrolled Resource Consumption
plone.app.portlets provides portlets and a Plone-specific user interface for plone.portlets. Prior to 5.0.8, 6.0.4, and 7.0.2, a member who can add an RSS portlet can set its feed URL to a very large response, causing src/plone/app/portlets/portlets/rss.py to download and retain excessive data in...
CVE-2026-33607: Uncontrolled Resource Consumption
An attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause degradation or denial of service for IMAP. Monitor system for abnormal CPU usage and kill the offending process and lock account. Alternatively install fixed version. No publicly available exploits are...
CVE-2026-27852: Uncontrolled Resource Consumption
An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive memory usage when the message is later parsed. The message is still delivered, but reading it over IMAP can exhaust the memory limit...
CVE-2026-33605: Uncontrolled Resource Consumption
An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...
CVE-2026-82235: Uncontrolled Resource Consumption
filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...
PT-2026-83337
IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service due to improper limitation of resources...
PT-2026-83290
Komodo through 2.3.2 discloses internal resource identifiers and writes audit entries before performing permission checks in the /execute and /execute/variant handlers. Authenticated users can guess resource names to obtain internal identifiers and insert fraudulent audit log entries...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rubygem-activeresource (UTSA-2026-093008)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093008 advisory. There is a possible information disclosure issue in Active Resource v5.1.1 that could allow an attacker to create specially crafted requests to access data in an...
CVE-2026-55247: Uncontrolled Resource Consumption
plone.app.event provides the event content type for Plone. Prior to versions 5.2.4 and 6.0.1, the iCalendar import in src/plone/app/event/ical/importer.py accepts insufficiently restricted calendar and event URLs, does not adequately bound downloaded bytes or imported events, and commits work per...
ROS-20260828-73-0023
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-82333: Uncontrolled Resource Consumption
multer is a middleware for handling multipart/form-data in Node.js. A small multipart request with two specially crafted text field names can make multer's field parser synchronously iterate a maximum-length sparse array, blocking the event loop so the process cannot handle other requests. A larg...
CVE-2026-42391: Uncontrolled Resource Consumption
An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by...
The vulnerability of the udev component of the Systemd initialization and service management subsystem, which allows a hacker to trigger a system failure.
The vulnerability of the udev component of the Systemd service management subsystem is related to improper resource movement between different areas. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the io_uring/kbuf.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability in the iouring/kbuf.c component of the Linux operating system’s kernel is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Util-linux command-line utility suite relates to insufficient checking of the status of shared resources, which allows a perpetrator to trigger a service failure.
The vulnerability of the Util-linux command-line utility package relates to insufficient checking of the status of shared resources. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of Microsoft PowerPoint presentation preparation programs, Microsoft Office packages, and 365 Apps for Enterprise, related to incomplete cleaning of temporary or auxiliary resources, allows attackers to disclose protected information.
The vulnerability of Microsoft PowerPoint presentation preparation programs, Microsoft Office packages, and 365 Apps for Enterprise lies in incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow attackers to disclose protected information...
The vulnerability of the uvc_start_streaming_video() function in the drivers/media/usb/uvc/uvc_queue.c file of the Linux operating system’s multimedia device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the uvcstartstreamingvideo function in the drivers/media/usb/uvc/uvcqueue.c file of the Linux operating system’s multimedia device driver relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the Codecs component in Firefox web browsers, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.
The vulnerability of the Codecs component in Firefox web browsers, Firefox ESR, and the Thunderbird email client is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the rpcrdma_post_recvs() function in the net/sunrpc/xprtrdma/verbs.c module of the Linux operating system’s RPC protocol implementation allows a attacker to cause a service failure.
The vulnerability of the rpcrdmapostrecvs function in the net/sunrpc/xprtrdma/verbs.c module of the Linux operating system’s RPC protocol implementation is related to incorrect resource initialization. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...