3315 matches found
Unchecked Input for Loop Condition
Overview Affected versions of this package are vulnerable to Unchecked Input for Loop Condition via unchecked input for the loop condition in the System.Net.WebSockets. An attacker can cause a denial of service by sending specially crafted network requests that trigger excessive resource...
Unchecked Input for Loop Condition
Overview Affected versions of this package are vulnerable to Unchecked Input for Loop Condition via unchecked input for the loop condition in the System.Net.WebSockets. An attacker can cause a denial of service by sending specially crafted network requests that trigger excessive resource...
Unchecked Input for Loop Condition
Overview Affected versions of this package are vulnerable to Unchecked Input for Loop Condition via unchecked input for the loop condition in the System.Net.WebSockets. An attacker can cause a denial of service by sending specially crafted network requests that trigger excessive resource...
Unchecked Input for Loop Condition
Overview Affected versions of this package are vulnerable to Unchecked Input for Loop Condition via unchecked input for the loop condition in the System.Net.WebSockets. An attacker can cause a denial of service by sending specially crafted network requests that trigger excessive resource...
Unchecked Input for Loop Condition
Overview Affected versions of this package are vulnerable to Unchecked Input for Loop Condition via unchecked input for the loop condition in the System.Net.WebSockets. An attacker can cause a denial of service by sending specially crafted network requests that trigger excessive resource...
GHSA-M93F-WJ8C-RP8P Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.WebSockets. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An unchecked input for loop condition in...
CVE-2026-68224
A flaw was found in the Linux kernel's mali-c55 driver. This vulnerability occurs because the mediapadremotepadunique function's error return value an ERRPTR was not properly checked before being dereferenced in the enablestreams function. A local attacker could exploit this oversight, potentiall...
CVE-2026-62901
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-62901
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...
.NET Denial of Service Vulnerability
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-62909: Unchecked Return Value
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-62901
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-19519: Reachable Assertion
A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an unchecked type assertion to panic the scanner. The panic is not recovered, causing the Clair indexer process to crash, leading to a denial of service...
CVE-2026-68224
In the Linux kernel, the following vulnerability has been resolved: media: mali-c55: Fix possible ERRPTR in enablestreams The mediapadremotepadunique function returns either a valid pointer or an ERRPTR on failure -ENOTUNIQ if multiple links are enabled, -ENOLINK if no connected pad is found. The...
CVE-2026-16985
The Squeeze WordPress plugin versions prior to 1.7.12 is vulnerable to an arbitrary file upload flaw. The issue stems from a failure to validate the file type or extension of per-size image data during certain attachment-update actions. This allows users with the upload_files capability (Author l...
PT-2026-69679
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Out-of-bounds reads exist in the remote DPCD and I2C sideband reply parsers. The functions drm dp sideband parse remote dpcd read and drm dp sideband parse remote i2c read ack perform a...
Linux Distros Unpatched Vulnerability : CVE-2026-68212
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: saa7134: Fix a possible memory leak in saa7134videoinit1 In saa7134videoinit1, the return value of the first saa7134pgtablealloc is not checked. If it...
PT-2026-69612
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the saa7134 video init1 function. The issue occurs because the return values of two saa7134 pgtable alloc calls are not checked, which can leave the driver with a...
Safe ErrorRegistry APIs can cause undefined behavior
All published versions of dcrypt-api before 2.0.0 exposed safe ErrorRegistry operations that could trigger undefined behavior when the default std feature was enabled. Stored Box values were erased to raw pointers and later deallocated as Box. The geterror operation also performed an unchecked ca...
CVE-2026-65819
gopacket provides packet processing capabilities for Go. Through version 1.7.0, multiple layer decoders use attacker-controlled lengths, counts, or offsets before validating them against packet buffers, allowing a crafted packet decoded through DecodingLayerParser or DecodeFromBytes to trigger an...