1824 matches found
CVE-2026-67555 Apache Qpid Proton Dotnet: Unable to govern the maximum number of transfer frames per incoming delivery
It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version...
CVE-2026-67552
Apache Qpid Proton-Dotnet (up to version 1.0.0) is affected by CVE-2026-67552 due to unbounded type nesting that can cause a pre-authentication StackOverflowError, potentially leading to denial of service. The vulnerability arises from excessive nesting in type handling and does not require user ...
EUVD-2026-53084
A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Proton-Dotnet through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...
CVE-2026-67552 Apache Qpid Proton Dotnet: Unbounded type nesting can lead to pre-authentication stackoverflow
A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Proton-Dotnet through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...
CVE-2026-67551
pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...
CVE-2026-67465
CVE-2026-67465 affects Apache Qpid Proton-Dotnet up to version 1.0.0. The root cause is unbounded symbol value caching, which can exhaust resources and trigger denial of service after pre-authentication. Upgrading to version 1.1.0 is recommended, as it contains the fix. The CVSS details indicate ...
EUVD-2026-53053
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...
CLSA-2026-1784596309 TuxCare security update for ms (19 CVEs)
TuxCare rebuilt ms to address 19 CVEs. Fixed in 1.0.0-tuxcare.1...
CLSA-2026-1776731782 TuxCare security update for follow-redirects (19 CVEs)
TuxCare rebuilt follow-redirects to address 19 CVEs. Fixed in 1.0.0-tuxcare.1...
CLSA-2026-1776818197 TuxCare security update for follow-redirects (4 CVEs)
TuxCare rebuilt follow-redirects to address 4 CVEs. Fixed in 1.0.0-tuxcare.2...
CLSA-2026-1774484506 TuxCare security update for minimatch (19 CVEs)
TuxCare rebuilt minimatch to address 19 CVEs. Fixed in 1.0.0-tuxcare.1...
CLSA-2026-1774743812 TuxCare security update for hawk (19 CVEs)
TuxCare rebuilt hawk to address 19 CVEs. Fixed in 1.0.0-tuxcare.1...
CLSA-2026-1773879459 TuxCare security update for cookie-signature (19 CVEs)
TuxCare rebuilt cookie-signature to address 19 CVEs. Fixed in 1.0.0-tuxcare.1...
CLSA-2026-1772756021 TuxCare security update for bl (19 CVEs)
TuxCare rebuilt bl to address 19 CVEs. Fixed in 1.0.0-tuxcare.1...
MAL-2026-11501 Malicious code in simple-date-formatter-util-5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6c0d10eabca0cef05a136e2ffd68781a965747ad1e75bf9fd9528292bbe429 The package is advertised as a date-formatting utility but its package.json postinstall script curls cloud-provider instance metadata endpoints AWS...
CVE-2026-14557
The CVE concerns the SoftMarket — Digital Marketplace WordPress plugin (through version 1.0.0). Root cause: the authentication token is not properly validated in one branch of the email-verification flow. Impact: unauthenticated attackers can obtain a valid session as any verified user by supplyi...
CVE-2026-16256
The CVE-2026-16256 entry concerns the POUCO Import Users WordPress plugin (
CVE-2026-16256 Pouco Import Users <= 1.0.0 - Unauthenticated Privilege Escalation
The POUCO Import Users WordPress plugin through 1.0.0 does not perform any capability or nonce checks on AJAX actions available to unauthenticated users that create and update WordPress accounts, and it trusts an attacker-supplied role value, allowing unauthenticated attackers to create a new...
MAL-2026-11498 Malicious code in @custombots/custombot (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88fd82e9d147a4fad43b89bab0b975fe57714abf16356eb39ec0ae62dcc7949 index.js opens a TCP connection to a base64-obfuscated IP address decodes to 85.137.253.124:1111, spawns /bin/sh, and pipes the shell's...