747688 matches found
PT-2026-105566
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go...
CVE-2025-31980: Improper Input Validation
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems...
CVE-2026-67171: Exposure of Sensitive Information to an Unauthorized Actor
HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database information. This information could enable an attacker to facilitate targeted database attacks...
CVE-2026-104057: Concurrent Execution using Shared Resource with Improper Synchronization
Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized concurrent access to shared maps activePlayers and allConnections in its WebSocket handler, where Wshandler and HandleWebsocketMessages goroutines read and write these maps without a mutex. A remote...
CVE-2026-8618: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability exists in the TDDPv2 service /usr/bin/tddp on Deco M9 Plus due to insufficient validation of decrypted request data length before it is copied into a fixed-size stack buffer in the subtype 0x91 handler. Successful exploitation may allow an adjacent,...
PT-2026-104825
It was discovered that libXpm did not correctly handle XPM images with zero-dimension values. A local attacker could possibly use this issue to cause libXpm to use excessive resources, leading to a denial of service...
PT-2026-105069
Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-77387: Inefficient Regular Expression Complexity
geopy is a geocoding library for Python. Prior to 2.5.0, geopy.Point and Point.fromstring can spend excessive CPU time due to inefficient regular-expression behavior when an application passes a long malformed coordinate string without the 256-character input limit used by the fix. Geocoder rever...
CVE-2026-63686: NULL Pointer Dereference
A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...
The vulnerability of the fragment_reassembly() function (epan/dissectors/packet-sctp.c) in the Wireshark network traffic analyzer allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the fragmentreassembly function epan/dissectors/packet-sctp.c in the Wireshark network traffic analyzer is related to the execution of operations outside the buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruption...
The vulnerability of the dissect_zbee_zcl_touchlink() function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.
The vulnerability of the dissectzbeezcltouchlink function in the Wireshark network traffic analyzer relates to the use of memory after it is freed. Exploiting this vulnerability can allow a hacker to cause a service failure...
The vulnerability of the shouldBypassProxy() function in the axios library’s lib/helpers/shouldBypassProxy.js file, which allows a hacker to trigger a service failure.
The vulnerability of the shouldBypassProxy function in the axios library’s lib/helpers/shouldBypassProxy.js file is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the `markHostPromiseHandled()` function in the `BaseHandler` component of the `vm2` library in the NPM package manager allows a attacker to trigger a service failure.
The vulnerability of the markHostPromiseHandled function in the BaseHandler component of the vm2 library in the NPM package manager is related to an error in handling exceptional states. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the MobiDoc::ParseHeader() function in the src/MobiDoc.cpp file of the PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu format document viewing software, SumatraPDF, allows a hacker to induce a service failure.
The vulnerability of the MobiDoc::ParseHeader function in the src/MobiDoc.cpp file of the PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu viewing software SumatraPDF lies in the reading of data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to cause a service...
The vulnerability of the csnStreamDissector component (epan/dissectors/packet-csn1.c) in the Wireshark network traffic analyzer allows a hacker to cause a service failure.
The vulnerability of the csnStreamDissector component epan/dissectors/packet-csn1.c in the Wireshark network traffic analyzer allows an attacker to cause a service failure by executing the operation outside of the buffer in memory...
The vulnerability of the Catapult DCT2000 file parser, a network traffic analyzer from Wireshark, allows a hacker to cause a service failure.
The vulnerability of the Catapult DCT2000 file parser, a packet analyzer for computer networks developed by Wireshark, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of the netmon_process_record() function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.
The vulnerability of the netmonprocessrecord function, a traffic analyzer in Wireshark, is related to the lack of input data validation for cyclic operations. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of the frame_add_comment() function (epan/dissectors/packet-frame.c) in the Wireshark network traffic analyzer allows a hacker to cause a service failure.
The vulnerability of the frameaddcomment function in the Wireshark network traffic analyzer program epan/dissectors/packet-frame.c is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a attacker to cause service failures...
The vulnerability of the keycode2keysymString() function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.
The vulnerability of the keycode2keysymString function in the Wireshark network traffic analyzer is related to the operation that occurs outside of the buffer in memory. Exploiting this vulnerability could allow a hacker to cause a service failure...
The vulnerability of the TTL analyzer parser in Wireshark allows a hacker to cause a service failure.
The vulnerability of the TTL analyzer in Wireshark for computer network traffic analysis is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...