GHSA-2HV5-4H3G-4HJV Duplicate Advisory: OpenClaw: LINE webhook handler lacks shared pre-auth concurrency budget before signature verification

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6336-qqw9-v6x6. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.31 lacks a shared pre-auth concurrency budget on the public LINE webhook path, allowing...

Grafana Tempo 资源管理错误漏洞

Grafana Tempo is a distributed tracing data storage and querying system developed by Grafana in open source. Grafana Tempo has a resource management vulnerability, which stems from excessive query restrictions leading to excessive memory allocation, potentially affecting the availability of the...

CVE-2026-31368

AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

CVE-2026-31368 Privilege Bypass in AiAssistant

AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

CVE-2026-31368 Privilege Bypass in AiAssistant

AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

EUVD-2026-24063

AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

CVE-2026-31368

Technical details are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2026-31369

Technical details about CVE-2026-31369 are not publicly provided in the connected documents. Monitor for updates from NVD, CVE List, and vendor advisories as new information becomes available.

CVE-2026-31369

PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

EUVD-2026-24065

PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

CVE-2026-31369 Privilege Bypass in PcManager

PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

CVE-2026-31369 Privilege Bypass in PcManager

PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

PT-2026-33916

Name of the Vulnerable Software and Affected Versions AiAssistant affected versions not specified Description A privilege bypass issue exists that may affect service availability if successfully exploited. Recommendations At the moment, there is no information about a newer version that contains ...

PT-2026-33917

PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

Honor PcManager 安全漏洞

Honor PcManager is a computer device management tool developed by the Honor company. Honor PcManager has a security vulnerability, which stems from a type of privilege bypass mechanism. This vulnerability may affect the availability of services...

ROS-20260414-73-0020

Vulnerability in kernel-lt related to unchecked array indexing. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

brace-expansion: brace-expansion: Denial of Service via unbounded brace range expansion

A flaw was found in the brace-expansion component. This denial of service DoS vulnerability allows a remote attacker to provide specially crafted input containing repeated numeric brace ranges. This input causes the library to attempt an unbounded expansion, consuming excessive CPU and memory...

The vulnerability of the resize_vbar_entry() function in the RDP client FreeRDP allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the resizevbarentry function in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Denial Of Service (DoS)

github.com/sigstore/timestamp-authority is vulnerable to Denial of Service DoS. The vulnerability is due to inefficient processing of untrusted input using string splitting in request parsing functions, which allows an attacker to send crafted inputs that trigger excessive memory allocations and...

CVE-2026-32011 OpenClaw < 2026.3.2 - Slow-Request Denial of Service via Pre-Auth Webhook Body Parsing

OpenClaw versions prior to 2026.3.2 contain a denial of service vulnerability in webhook handlers for BlueBubbles and Google Chat that parse request bodies before performing authentication and signature validation. Unauthenticated attackers can exploit this by sending slow or oversized request...