236 matches found
CVE-2026-23957
seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0 and below, overriding encoded array lengths by replacing them with an excessively large value causes the deserialization process to significantly increase processing...
Astra Linux – Vulnerability in Ruby 3.1
A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby, up to 3.2.1. The Time parser improperly handles invalid URLs that contain specific characters. This causes an increase in execution time when parsing strings into Time objects. The fixed versions are 0.1.1 and 0.2.2...
python: Quadratic complexity in os.path.expandvars() with user-controlled template
A vulnerability in Python’s os.path.expandvars function that can cause performance degradation. When processing specially crafted, user-controlled input with nested environment variable patterns, the function exhibits quadratic time complexity, potentially leading to excessive CPU usage and denia...
Important: cni-plugins
Issue Overview: net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed withi...
Siemens SIMATIC S7-1500 Uncontrolled Resource Consumption (CVE-2023-32611)
A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
Important: soci-snapshotter
Issue Overview: net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed withi...
CVE-2025-64458
An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence, django.http.HttpResponseRedirect, django.http.HttpResponsePermanentRedirect, and the shortcut django.shortcuts.redirect were subject to a...
SUSE CVE-2025-6075
If the value passed to os.path.expandvars is user-controlled a performance degradation is possible when expanding environment variables...
AZL-69628 CVE-2025-6075 affecting package python3 for versions less than 3.12.9-6
If the value passed to os.path.expandvars is user-controlled a performance degradation is possible when expanding environment variables...
JLSEC-2025-161 A flaw was found in GLib
A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service...
EUVD-2006-0437
Malware in sbrugna...
EUVD-2020-27383
Malware in sbrugna...
EUVD-2021-0968
Malware in sbrugna...
EUVD-2017-9950
Malware in sbrugna...
EUVD-2005-3892
Malware in sbrugna...
EUVD-2016-0241
Malware in sbrugna...
EUVD-2020-1943
Malware in sbrugna...
EUVD-2013-1228
Malware in sbrugna...