60266 matches found
AlmaLinux 9 : java-17-openjdk (ALSA-2026:55781)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55781 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has extracted...
RockyLinux 8 : java-1.8.0-openjdk (RLSA-2026:55775)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55775 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has extracted...
The vulnerability of the CoreDNS Loop Plugin in the coredns DNS server allows attackers to increase their privileges.
The vulnerability of the CoreDNS Loop Plugin in the coredns DNS server is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to increase their privileges...
The vulnerability of the Coredns DNS server, related to synchronization errors when using a shared resource, allows attackers to increase their privileges.
The vulnerability of the Coredns DNS server is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
The vulnerability of the mm/page_alloc component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the mm/pagealloc component in the Linux operating system’s kernel is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause service failures...
AlmaLinux 10 : java-21-openjdk (ALSA-2026:55787)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55787 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has extracted...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102075)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102075 advisory. In the Linux kernel, the following vulnerability has been resolved: tracepoint: balance regfunc on funcadd failure in tracepointaddfunc When a tracepoint goes throug...
The vulnerability of the Alertmanager Templates Test Endpoint component of the Grafana monitoring and observation platform allows a perpetrator to trigger a service failure.
The vulnerability of the Alertmanager Templates Test Endpoint component of the Grafana monitoring and logging platform involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
CVE-2026-77354: Uncontrolled Resource Consumption
kin-openapi is a Go project for handling OpenAPI files. From 0.124.0 until 0.142.0, openapi3filter.sliceMapToSlice in openapi3filter/reqrespdecoder.go converts attacker-controlled sparse indexes from a deepObject query parameter into a dense slice by allocating entries from zero through the large...
CVE-2026-53531: Uncontrolled Resource Consumption
RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, RaTeX’s recursive-descent parser recurses one or more native stack frame per nesting level at , \left, \sqrt, ^, etc, with no maximum depth limit. A short, 10 KB input of nested groups overflows the 8 MB...
CVE-2026-59279: Allocation of Resources Without Limits or Throttling
The MCP Streamable HTTP server transport WebFlux and WebMvc variants does not place any limit on the number of sessions it retains, and by default does not require clients to be authenticated. As a result, a remote attacker can cause the server to accumulate an unbounded number of sessions over...
RHEL 9 : mod_md (RHSA-2026:57844)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57844 advisory. This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate...
PT-2026-79464
Name of the Vulnerable Software and Affected Versions Esri Portal for ArcGIS versions prior to 12.1 Description A missing authentication flaw allows a remote, unauthenticated attacker to access a specific resource that is intended to be restricted to authenticated users. This resource does not...
MINI-52M5-4FMW-J8X5
Bulletin has no description...
CVE-2026-74423
A flaw was found in the Linux kernel's accel/amdxdna component. This vulnerability occurs when the pinuserpagesfast function, responsible for pinning user buffer ubuf pages, returns fewer pages than requested. In such cases, the pages that were successfully pinned are not properly released, leadi...
CVE-2026-74396
A flaw was found in the Linux kernel's RDMA/mlx5 component. When the mlx5odppopulatexlt function encounters an error, it fails to properly clean up allocated resources. This can lead to a memory leak of the XLT DMA mapping and buffer. Additionally, if an emergency XLT page was used, a mutex could...
CVE-2026-74397
A flaw was found in the Linux kernel's InfiniBand IB Mellanox 5 mlx5 driver. This vulnerability occurs when the driver allocates a transport domain but fails to properly deallocate it if a subsequent operation encounters an error. This oversight leads to a resource leak, which could potentially...
CVE-2026-74415
A flaw was found in the Linux kernel's atcspi200 Serial Peripheral Interface SPI driver. When the driver unbinds, the Direct Memory Access DMA resource can be prematurely deallocated while the SPI controller is still active and initiating DMA transfers. This timing issue can lead to a...
CVE-2026-54389
Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...