CVE-2026-38819

openNDS versions before 11.0.0 contain multiple memory leaks that allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes, resulting in a denial of service. The CVSS 3.1 score is 5.3 (MEDIUM) with an adjacent network vector and ...

CVE-2026-38819

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes...

EUVD-2026-67359

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes...

CVE-2026-38819

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes...

CVE-2020-1350

Warnung Dieses Repository wurde archiviert und wird nicht mehr aktiv gepflegt. CVE-2020-1350 Dieses PowerShell-Skript überprüft, ob Ihr Server anfällig für die Sicherheitslücke CVE-2020-1350 Remote Code Execution im Windows DNS-Dienst ist. Unterstützte Betriebssysteme für dieses Workaround-Skript...

CVE-2026-51376

BitChat for iOS v1.15.0 is affected by a denial-of-service vulnerability in the mesh gossip cache . A remote, unauthenticated attacker can trigger the DoS by sending a crafted MESSAGE packet into the gossip cache. A fix is provided in PR #998 , and a proof-of-concept demonstrating BLE cache poiso...

EUVD-2026-67769

An issue in the withargv function /unistd/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2026-67773

An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-83236

Name of the Vulnerable Software and Affected Versions KubeVela versions prior to 1.9.14 KubeVela versions 1.10.0-alpha.1 through 1.10.8 KubeVela versions 1.11.0-alpha.1 through 1.11.0-alpha.3 Description The Terraform remote configuration loader in KubeVela can be abused to cause a denial of...

CVE-2026-38638

An issue in the withargv function /unistd/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...

Elixir -- Denial of service via uncontrolled recursion in charlist conversion

tomciopp reports: Uncontrolled recursion in the Elixir standard library lets an attacker who controls a list passed to inspect/1, List.tostring/1, or List.tocharlist/1 exhaust a BEAM node's memory. Inspect.List checks only a bounded prefix 4096 elements by default to determine whether a list is a...

Python Library OpenEXR 3.4.0 < 3.4.13 DoS (CVE-2026-53532)

The version of the OpenEXR Python package installed on the remote host is 3.4.x prior to 3.4.13. It is, therefore, affected by a denial of service vulnerability: - A crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted...

Spring Framework 5.2.x < 5.2.26 / 5.3.x < 5.3.50 / 6.0.x < 6.0.31 / 6.1.x < 6.1.29 / 6.2.x < 6.2.20 / 7.0.x < 7.0.8.1 Memory Leak via SETUP Frame in RSocketMessageHandler

The version of Spring Framework installed on the remote host is 5.2.x prior to 5.2.26, 5.3.x prior to 5.3.50, 6.0.x prior to 6.0.31, 6.1.x prior to 6.1.29, 6.2.x prior to 6.2.20, or 7.0.x prior to 7.0.8.1. It is, therefore, affected by a vulnerability: - A Spring RSocket application is exposed to...

Linux Distros Unpatched Vulnerability : CVE-2026-82324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM...

FreeBSD : Gitlab -- Vulnerabilities (161b1c49-a29b-11f1-a883-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 161b1c49-a29b-11f1-a883-2cf05da270f3 advisory. Gitlab reports: Inclusion of Functionality from Untrusted Control Sphere issue in Duo Claude A...

EUVD-2026-67770

An issue in the seekdir function /dirent/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-37736

An issue in the JsonSanitizer.sanitize() component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service (DoS) via a crafted input. The vulnerability is rated CVSS 3.1: 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, meaning it is network-exploitable with n...

PT-2026-83369

Name of the Vulnerable Software and Affected Versions free5GC versions 1.4.4 and earlier Description The AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool within internal/context/context.go, using only the SUPI as a key. Requests processed by...

PT-2026-82871

The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.68 do not properly sanitize a file path taken from a frontend file submission and their single-pass traversal filter is bypassable, allowing unauthenticated users to store a path that points outside the...

PT-2026-82877

Name of the Vulnerable Software and Affected Versions Synology Chat Server versions prior to 2.4.5-22148 Description An improper neutralization of input during web page generation, known as Cross-site Scripting XSS, occurs in the extract domain component. This allows remote authenticated users,...