Apache Tomcat 10.1.0.M1 < 10.1.59 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 10.1.59. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.59security-10 advisory. - Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This iss...

The vulnerability of the __ftraceTraceStack() function in the kernel/trace/trace.c file, which supports Linux operating system traceability, allows a hacker to cause a service failure.

The vulnerability of the ftraceTraceStack function in the kernel/trace/trace.c file, which supports Linux operating system traceability, is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the InlineParser emphasis processing in src/mistune/inlineparser.py. An attacker can crash the Python process by supplying Markdown with a very long run of emphasis markers, such as hundreds or thousands o...

CVE-2026-16781

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service...

EUVD-2026-65149

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service...

CVE-2026-16781

A maliciously crafted SVG file , when parsed by Autodesk 3ds Max , triggers an Uncontrolled Recursion (stack exhaustion) vulnerability that causes the application to terminate unexpectedly, resulting in a denial-of-service . The CVSS v3.1 score is 5.5 (Medium) , with a local attack vector requiri...

CVE-2026-16781 SVG File Parsing Stack Exhaustion Vulnerability in Autodesk 3ds Max

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service...

Astra Linux – Vulnerability in curl

Curl versions 7.21.0 through 7.73.0 are vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing...

Astra Linux – Vulnerability in Vim

Uncontrolled recursion in the GitHub repository vim/vim before version 8.2.4975...

Astra Linux – Vulnerability in dovecot

The Sieve engine in Dovecot before 2.3.15 allowed uncontrolled resource consumption, as demonstrated by a situation involving a complex regular expression for the regex extension...

CVE-2026-78206 exceljs through 4.4.0 Uncontrolled Resource Consumption via Unbounded xlsx Decompression

exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of service...

CVE-2026-78206 exceljs through 4.4.0 Uncontrolled Resource Consumption via Unbounded xlsx Decompression

exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of service...

The vulnerability in the fs/nfs/file.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/nfs/file.c component of the Linux operating system is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the XML component in the Firefox web browser allows a hacker to trigger a service failure.

The vulnerability of the XML component in the Firefox web browser is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the drm/pthor component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drm/pthor component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a hacker to cause a service failure...

CVE-2026-9769

justhtml through 1.9.1 fixed in 1.10.0 is vulnerable to uncontrolled recursion leading to denial of service. During JustHTML construction, TreeBuilder.finish unconditionally calls populateselectedcontent, which recursively traverses the DOM tree via findelements/findelement without a depth bound...

CVE-2026-9769 justhtml before 1.10.0 Denial of Service via deeply nested HTML

justhtml through 1.9.1 fixed in 1.10.0 is vulnerable to uncontrolled recursion leading to denial of service. During JustHTML construction, TreeBuilder.finish unconditionally calls populateselectedcontent, which recursively traverses the DOM tree via findelements/findelement without a depth bound...

CVE-2026-9769 justhtml before 1.10.0 Denial of Service via deeply nested HTML

justhtml through 1.9.1 fixed in 1.10.0 is vulnerable to uncontrolled recursion leading to denial of service. During JustHTML construction, TreeBuilder.finish unconditionally calls populateselectedcontent, which recursively traverses the DOM tree via findelements/findelement without a depth bound...

CVE-2026-9769

justhtml (Python HTML parser) through version 1.9.1 is vulnerable to uncontrolled recursion leading to denial of service. During JustHTML() construction, TreeBuilder.finish() unconditionally calls _populate_selectedcontent(), which recursively traverses the DOM tree via _find_elements()/_find_ele...

EUVD-2026-64661

justhtml through 1.9.1 fixed in 1.10.0 is vulnerable to uncontrolled recursion leading to denial of service. During JustHTML construction, TreeBuilder.finish unconditionally calls populateselectedcontent, which recursively traverses the DOM tree via findelements/findelement without a depth bound...