16204 matches found
EUVD-2026-53051
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...
PT-2026-67957
Name of the Vulnerable Software and Affected Versions Apache Qpid ProtonJ2 versions prior to 1.2.0 Description A pre-authentication attacker can cause resource exhaustion leading to a denial of service by leveraging unbounded symbol value caching. Symbol value caching is a mechanism used to store...
CVE-2026-66257: Allocation of Resources Without Limits or Throttling
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...
PT-2026-67955
Name of the Vulnerable Software and Affected Versions Apache Qpid Proton-Dotnet versions prior to 1.1.0 Description A pre-authentication attacker can cause resource exhaustion leading to a denial of service by leveraging unbounded symbol value caching. Recommendations Upgrade to version 1.1.0...
CVE-2026-67465: Allocation of Resources Without Limits or Throttling
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...
PT-2026-68346
Name of the Vulnerable Software and Affected Versions HDF5 versions prior to 2.3.0 Description A NULL pointer dereference occurs in the H5Pget fill value function. This happens when a dataset contains a version 1 or 2 fill value message where the "defined" flag is set and the size field is...
CVE-2026-68074: Allocation of Resources Without Limits or Throttling
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue...
PT-2026-68237
Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description An internal security review identified issues related to incorrect calculations. These issues fall under the category of CWE-682, which refers to a correctness check that is...
PT-2026-67951
Name of the Vulnerable Software and Affected Versions Apache Qpid Proton-J versions prior to 0.35.0 Description A pre-authentication attacker can cause resource exhaustion leading to a denial of service by leveraging unbounded symbol value caching. Recommendations Upgrade to version 0.35.0...
CVE-2026-67588: Allocation of Resources Without Limits or Throttling
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...
The vulnerability of the Config.get_value() function in the Glances monitoring tool allows a malicious actor to escalate their privileges.
The vulnerability of the Config.getvalue function in the Glances monitoring tool is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the exif_mnote_data_get_value() function in the library for parsing EXIF files in Libexif format allows a hacker to cause a service failure.
The vulnerability of the exifmnotedatagetvalue function in the library for parsing EXIF files in Libexif files involves a numerical loss of significance. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-67960
Name of the Vulnerable Software and Affected Versions Apache Qpid Broker-J versions prior to 10.1.0 Description A pre-authentication attacker can cause resource exhaustion leading to a denial of service by leveraging unbounded symbol value caching. This occurs when the system caches symbol values...
pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values
A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption,...
CLSA-2026-1784943105 TuxCare security update for estree-util-value-to-estree (1 CVE)
TuxCare rebuilt estree-util-value-to-estree to address 1 CVE. Fixed in 1.3.0-tuxcare.1...
CLSA-2026-1782954034 TuxCare security update for set-value (2 CVEs)
TuxCare rebuilt set-value to address 2 CVEs. Fixed in 2.0.0-tuxcare.1...
netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers
A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested PP2TYPESSL type-length-value TLV records. This can lead to a memory leak, causing the underlying cumulation...
Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection)
SummaryThe terminal proxy in backend/openwebui/routers/terminals.py forwards the Open WebUI user's identity to the upstream terminal server / backend coordinator as an authorization claim, with no cryptographic binding to the session that produced it. The forwarded identity is...