Lucene search
+L

13936 matches found

CVE
CVE
added 2026/08/05 5:43 a.m.38 views

CVE-2026-67555

The CVE-2026-67555 entry concerns Apache Qpid Proton-Dotnet up to version 1.0.0, where the maximum number of transfer frames per incoming delivery could not be governed. This could allow an authenticated attacker to cause excessive resource usage and potential denial of service (availability impa...

6.5CVSS5.4AI score0.00413EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/08/05 5:43 a.m.41 views

CVE-2026-68078 Apache Qpid Broker-J: Unable to govern the maximum number of transfer frames per incoming delivery

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version...

0.00413EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/05 5:43 a.m.47 views

CVE-2026-68078

The CVE describes a DoS risk in Apache Qpid Broker-J caused by an inability to govern the maximum number of transfer frames per incoming delivery. This weakness allows an authenticated attacker to trigger excessive resource usage, potentially degrading service. Affected versions are up to 10.0.1;...

6.5CVSS5.4AI score0.00413EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/08/05 5:43 a.m.5 views

EUVD-2026-53094

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version...

6.5CVSS5.4AI score0.00413EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/05 5:43 a.m.7 views

CVE-2026-68078 Apache Qpid Broker-J: Unable to govern the maximum number of transfer frames per incoming delivery

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version...

6.5CVSS5.3AI score
SaveExploits0References5
EUVD
EUVD
added 2026/08/05 5:42 a.m.7 views

EUVD-2026-53093

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version...

6.5CVSS5.4AI score0.00421EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/05 5:42 a.m.41 views

CVE-2026-66277

CVE-2026-66277 affects Apache Qpid Proton-J up to version 0.34.1. The issue is an inability to govern the maximum number of transfer frames per incoming delivery, allowing an authenticated attacker to cause excessive resource usage and potential denial of service. The recommended remediation is t...

6.5CVSS5.4AI score0.00421EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/08/05 5:42 a.m.6 views

CVE-2026-66277 Apache Qpid Proton-J: Unable to govern the maximum number of transfer frames per incoming delivery

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version...

6.5CVSS5.3AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/05 5:42 a.m.34 views

CVE-2026-66277 Apache Qpid Proton-J: Unable to govern the maximum number of transfer frames per incoming delivery

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version...

0.00421EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/08/05 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-67592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage...

7.5CVSS5.3AI score0.00478EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2026/08/05 12:0 a.m.20 views

📄 LightFTP Server 2.3.1 Race Condition

LightFTP version 2.3.1 contains a residual race condition in the workerthreadcleanup function of ftpserv.c. The control thread reads and acts on shared per-connection state, including the worker thread id it then passes to pthreadjoin/pthreadcancel, without holding the context-MTLock mutex that t...

9.2CVSS5.6AI score0.00333EPSS
SaveExploits3
NVD
NVD
added 2026/08/04 10:17 p.m.7 views

CVE-2026-67856

An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via crafted CreateSubscription, CreateMonitoredItemsSampling, Publish, TransferSubscriptions, and DeleteSubscriptions requests...

7.5CVSS0.00422EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2026/08/04 4:38 p.m.34 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

No d...

7.8CVSS7.5AI score0.99907EPSS
SaveExploits237
Cvelist
Cvelist
added 2026/08/04 2:23 p.m.40 views

CVE-2026-11368 Use-after-free in Bluetooth host ATT TX completion on disconnect mid-transfer

The Bluetooth host ATT layer subsys/bluetooth/host/att.c associates each in-flight ATT TX buffer with its owning channel via the static txmetadatastorage array data-attchan = chan. When a buffer's last reference is dropped, its net-buf destroy callback defers the completion handling to the system...

7.1CVSS0.00185EPSS
SaveExploits1References2
OSV
OSV
added 2026/08/04 2:23 p.m.6 views

CVE-2026-11368 Use-after-free in Bluetooth host ATT TX completion on disconnect mid-transfer

The Bluetooth host ATT layer subsys/bluetooth/host/att.c associates each in-flight ATT TX buffer with its owning channel via the static txmetadatastorage array data-attchan = chan. When a buffer's last reference is dropped, its net-buf destroy callback defers the completion handling to the system...

7.1CVSS5.7AI score
SaveExploits0References5
CVE
CVE
added 2026/08/04 12:0 a.m.48 views

CVE-2026-67856

The vulnerability CVE-2026-67856 affects the open62541 OPC UA server and is present in version 1.5.5 and earlier. The issue allows a remote attacker to cause a denial of service by sending crafted subscription-related requests, specifically CreateSubscription, CreateMonitoredItems(Sampling), Publ...

7.5CVSS5.5AI score0.00422EPSS
SaveExploits0References5
Mageia
Mageia
added 2026/08/03 6:47 p.m.8 views

Updated squid packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Due to a Improper Validation of Syntactic Correctness of Inputbug, Squid is vulnerable to a Out-of-bounds Read attack against the FTP gateway. CVE-2026-47729 Due to an Improper Input Validation bug, Squid is vulnerable to a Heap-based Buffer...

6.5CVSS6.5AI score0.01503EPSS
SaveExploits1References4
OSV
OSV
added 2026/08/03 6:47 p.m.6 views

MGASA-2026-0319 Updated squid packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Due to a Improper Validation of Syntactic Correctness of Inputbug, Squid is vulnerable to a Out-of-bounds Read attack against the FTP gateway. CVE-2026-47729 Due to an Improper Input Validation bug, Squid is vulnerable to a Heap-based Buffer...

6.5CVSS6.5AI score0.01503EPSS
SaveExploits1References5
NVD
NVD
added 2026/08/03 5:16 p.m.9 views

CVE-2026-68945

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...

8.8CVSS0.00119EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/03 5:16 p.m.4 views

UBUNTU-CVE-2026-68945

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...

8.8CVSS5.5AI score0.00119EPSS
SaveExploits0References8
Rows per page
Query Builder