1594 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-75140
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to...
Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway
Summary Security Vulnerabilities affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplicatio...
CVE-2026-75140 jsoup Uncontrolled Resource Consumption in XmlTreeBuilder
jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...
CVE-2026-75140 jsoup Uncontrolled Resource Consumption in XmlTreeBuilder
jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...
CVE-2026-63016 Apache InLong: Ordinary users can create new packages
Uncontrolled Resource Consumption vulnerability in Apache InLong. Users could affect operational configuration or allow upload of non-official packages. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick 1 to solve it. 1...
CVE-2026-63015
Uncontrolled Resource Consumption vulnerability in Apache InLong. Non-template responsible persons can view template information. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick 1 to solve it. 1...
Security Bulletin: Multiple vulnerabilities affect IBM® Semeru Runtime
Summary This bulletin for IBM Semeru Runtime covers all applicable Java SE CVEs published by OpenJDK as part of their July 2026 Vulnerability Advisory, plus three further vulnerabilities. For more information please refer to OpenJDK's July 2026 Vulnerability Advisory and the CVE links below...
PT-2026-79259
Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...
PT-2026-79245
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption when parsing directory records...
EUVD-2026-62715
Uncontrolled resource consumption in check.jst in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote unauthenticated attacker to cause denial of service via excessively large password values...
CVE-2026-19507
The Initial Description provides concrete details: the vulnerable component is check.jst in RDK-B WebUI version rdkb-2025q4-kirkstone.04.10.26, the root cause is uncontrolled resource consumption triggered by excessively large password values, and the impact is denial of service by a remote unaut...
EUVD-2026-62520
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
MINI-FV6M-X7PX-MH3V
Bulletin has no description...
The vulnerability of the ActiveMQ NIO SSL module in Apache ActiveMQ products allows a attacker to cause a service failure.
The vulnerability of the ActiveMQ NIO SSL software products of Apache ActiveMQ is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service failures...
GO-2026-4865 vulnerabilities
Vulnerabilities for packages: chartmuseum, argo-cd, sftpgo-plugin-auth, helm-set-status, cloud-provider-vsphere, crossplane-provider-azure-managedidentity, kubernetes-dashboard, fuse-overlayfs-snapshotter, karpenter, cilium, kube-state-metrics, nuclei, kargo, redka, crossplane-provider-keycloak,...
Security Bulletin: IBM Engineering Test Management product using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by uncontrolled resource consumption and denial of service CVE-2026-50645, CVE-2026-9322, CVE-2026-9171. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...
The vulnerability of the component vmw_vsock/virtio_transport_common.c in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the vmwvsock/virtiotransportcommon.c component in the Linux operating system is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-19587
Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation...