12864 matches found
Server-Side Request Forgery (SSRF)
kLOsk adloop is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insufficient validation of the finalurl parameter in the validateurls function, where attacker-controlled URLs are processed without adequate restrictions, allowing attackers to make server-side requests t...
Microsoft Excel code execution vulnerability (CNVD-2026-28615)
Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. Microsoft Excel has a code execution vulnerability, which stems from the use of resources...
PT-2026-60362
Name of the Vulnerable Software and Affected Versions Datadog .NET Tracer versions prior to 3.43.0 Description Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing limits on the number of items or the total byte size during...
PT-2026-60179
When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with permission to create or modify Ingress or TransportServer resources can cause the NGINX Ingress Controller process to terminate. Impact: The NGINX Ingress Controller control plane...
PT-2026-60291
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase template static resources let authenticated users submit TemplateManageRequest.staticResource through POST /de2api/templateManage/save or DataVisualizationServer.decompression, after which...
CVE-2026-59762: Allocation of Resources Without Limits or Throttling
When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Impact: System performance can degrade until the TMM process is either forced to restart or is manually restarted. This vulnerability allows a remote,...
The vulnerability of GitHub Copilot for Jetbrains lies in its improper restrictions on file names and other resources, allowing a hacker to execute arbitrary code.
The vulnerability of GitHub Copilot for Jetbrains relates to incorrect restrictions on file names and other resources. Exploiting this vulnerability could allow a hacker to execute arbitrary code...
The vulnerability of the Windows Runtime component in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Windows Runtime component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Moby container isolation system creation software, related to synchronization errors when using shared resources, allows a intruder to trigger a service failure.
The vulnerability of the Moby container isolation system creation software is related to synchronization errors when using a shared resource “Race Conditions”. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Windows Runtime component in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Windows Runtime component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability in the implementation of the SMB protocol in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the SMB protocol implementation in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
CVE-2026-24271
NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resources without limits or throttling. A successful exploit of this vulnerability might lead to denial of service...
CVE-2026-50525
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-50525
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
EUVD-2026-44116
Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally...
EUVD-2026-43900
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Operating Systems allows an authorized attacker to elevate privileges locally...
EUVD-2026-43803
Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network...
CVE-2026-50676
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Media allows an authorized attacker to elevate privileges locally...