748134 matches found
BIT-ELASTICSEARCH-2026-94397 Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...
BIT-ELASTICSEARCH-2026-94396 Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...
BIT-ELASTICSEARCH-2026-82300 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...
gvfs: SFTP: heap-based buffer overflow in read_reply()
A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...
CVE-2026-47516
A flaw was found in the NVIDIA GPU Display Driver. An unprivileged local user can trigger a use-after-free condition, which occurs when the driver accesses memory that has already been released. Successful exploitation could allow the attacker to execute arbitrary code, escalate privileges, tampe...
CLEANSTART-2024-IK84393 attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse
CVE-2022-32149 affects multiple packages. An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse. See references for individual vulnerability details...
CLEANSTART-2024-SH80955 Use after free in Network service in Google Chrome prior to 91
Security vulnerability affects the chromium package. Use after free in Network service in Google Chrome prior to 91...
Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jul 2026 - Includes Oracle July 2026 CPU plus four additional vulnerabilities for Rational Software Architect Designer
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition,Versions 8 , Java 17 and Java 21 that are used by Rational Software Architect Designer and Rational Software Architect Designer for Websphere Software. These issues were disclosed as part of the IBM SDK, Java Technolo...
CLEANSTART-2024-IP77496 Use after free in Animation in Google Chrome prior to 98
Security vulnerability affects the chromium package. Use after free in Animation in Google Chrome prior to 98...
CLEANSTART-2024-EK00824 denial of service in the subtitle decoder in FFmpeg 3
Security vulnerability affects the ffmpeg4 package. A denial of service in the subtitle decoder in FFmpeg 3...
CLEANSTART-2024-DJ59704 Denial of Service vulnerability exists in FFmpeg 4
Security vulnerability affects the ffmpeg4 package. A Denial of Service vulnerability exists in FFmpeg 4...
CLEANSTART-2024-LO98528 Denial of Service vulnerability exists in FFmpeg 4
Security vulnerability affects the ffmpeg4 package. A Denial of Service vulnerability exists in FFmpeg 4...
CLEANSTART-2024-VV92296 Denial of Service vulnerability exists in FFmpeg 4
Security vulnerability affects the ffmpeg4 package. A Denial of Service vulnerability exists in FFmpeg 4...
CLEANSTART-2024-FQ58069 Use after free in File Manager in Google Chrome prior to 101
Security vulnerability affects the chromium package. Use after free in File Manager in Google Chrome prior to 101...
CLEANSTART-2024-EQ42867 Use after free in SwiftShader in Google Chrome prior to 101
Security vulnerability affects the chromium package. Use after free in SwiftShader in Google Chrome prior to 101...
CLEANSTART-2024-UA33710 Use after free in App Service in Google Chrome prior to 102
Security vulnerability affects the chromium package. Use after free in App Service in Google Chrome prior to 102...
CLEANSTART-2024-NA59250 Use after free in Service Worker API in Google Chrome prior to 103
Security vulnerability affects the chromium package. Use after free in Service Worker API in Google Chrome prior to 103...
Denial-Of-Service (DoS)
Apache Qpid Proton-J is vulnerable to denial-of-service DoS. The vulnerability is due to improper handling of type size/count values, which allows a pre-authentication attacker to trigger excessive memory allocation and potentially cause a denial of service...