60294 matches found
The vulnerability of the Alertmanager Templates Test Endpoint component of the Grafana monitoring and observation platform allows a perpetrator to trigger a service failure.
The vulnerability of the Alertmanager Templates Test Endpoint component of the Grafana monitoring and logging platform involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
RockyLinux 8 : java-1.8.0-openjdk (RLSA-2026:55775)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55775 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has extracted...
CVE-2026-77354: Uncontrolled Resource Consumption
kin-openapi is a Go project for handling OpenAPI files. From 0.124.0 until 0.142.0, openapi3filter.sliceMapToSlice in openapi3filter/reqrespdecoder.go converts attacker-controlled sparse indexes from a deepObject query parameter into a dense slice by allocating entries from zero through the large...
CVE-2026-53531: Uncontrolled Resource Consumption
RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, RaTeX’s recursive-descent parser recurses one or more native stack frame per nesting level at , \left, \sqrt, ^, etc, with no maximum depth limit. A short, 10 KB input of nested groups overflows the 8 MB...
Linux Distros Unpatched Vulnerability : CVE-2026-75140
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to...
CVE-2026-59279: Allocation of Resources Without Limits or Throttling
The MCP Streamable HTTP server transport WebFlux and WebMvc variants does not place any limit on the number of sessions it retains, and by default does not require clients to be authenticated. As a result, a remote attacker can cause the server to accumulate an unbounded number of sessions over...
PT-2026-79464
Name of the Vulnerable Software and Affected Versions Esri Portal for ArcGIS versions prior to 12.1 Description A missing authentication flaw allows a remote, unauthenticated attacker to access a specific resource that is intended to be restricted to authenticated users. This resource does not...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102052)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102052 advisory. In the Linux kernel, the following vulnerability has been resolved: inotify: fix watch count leak when fsnotifyaddinodemarklocked fails When fsnotifyaddinodemarklock...
AlmaLinux 9 : java-17-openjdk (ALSA-2026:55781)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55781 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has extracted...
Kibana 9.3.x < 9.3.8 / 9.4.x < 9.4.4 Denial of Service (ESA-2026-91)
The version of Kibana installed on the remote host is 9.3.x prior to 9.3.8, or 9.4.x prior to 9.4.4. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-91 advisory. - Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service vi...
Kibana 8.12.x < 8.19.19 / 9.0.x < 9.3.8 / 9.4.x < 9.4.4 Multiple Vulnerabilities (ESA-2026-102 / ESA-2026-108)
The version of Kibana installed on the remote host is 8.12.x prior to 8.19.19, 9.0.x prior to 9.3.8, or 9.4.x prior to 9.4.4. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-102 and ESA-2026-108 advisories. - Missing Authorization CWE-862 in Kibana can lead to...
AlmaLinux 9 : java-1.8.0-openjdk (ALSA-2026:55775)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55775 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has extracted...
AlmaLinux 10 : java-21-openjdk (ALSA-2026:55787)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55787 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has extracted...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102083)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102083 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reservation leak in some error paths when inserting inline extent If we fail to alloca...
RockyLinux 10 : java-25-openjdk (RLSA-2026:55798)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55798 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Improve font loading CVE-2026-70906 JDK: Enhance TLS...
RHEL 9 : mod_md (RHSA-2026:57844)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57844 advisory. This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate...
The vulnerability of the mm/page_alloc component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the mm/pagealloc component in the Linux operating system’s kernel is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause service failures...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102076)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102076 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Userspace can pass an...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102075)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102075 advisory. In the Linux kernel, the following vulnerability has been resolved: tracepoint: balance regfunc on funcadd failure in tracepointaddfunc When a tracepoint goes throug...
