2023 matches found
MINI-XM88-V33F-R8QX
Bulletin has no description...
CVE-2026-56150 Allocation of Resources Without Limits or Throttling in Fleet Server Leading to Denial of Service
Allocation of Resources Without Limits or Throttling CWE-770 in Fleet Server can lead to a denial of service via Excessive Allocation CAPEC-130. An attacker can submit a specially crafted request to an upload endpoint that causes excessive memory consumption, which may render Fleet Server...
ECHO-F902-7FB3-E1FF
Bulletin has no description...
ECHO-3D19-85C2-1675
Bulletin has no description...
ECHO-AE85-B427-B70F
Bulletin has no description...
CVE-2026-53345
In the Linux kernel, the following vulnerability has been resolved: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying When marking a page dirty, complain about not having a running/loaded vCPU if and only if the VM is still alive, i.e. its refcount is non-zero. This will...
CGA-R398-C7HQ-HGV5
Bulletin has no description...
CGA-5W26-5P53-JQMV
Bulletin has no description...
CGA-QP5G-7R43-5P2W
Bulletin has no description...
CGA-R347-W598-636F
Bulletin has no description...
CGA-4Q2M-HGX3-5G3G
Bulletin has no description...
CGA-56M5-52RG-2732
Bulletin has no description...
CGA-5J2F-2659-HWRR
Bulletin has no description...
BELL-CVE-2026-53285
Bulletin has no description...
CVE-2026-57204 pypdf: Missing stream length values ignore defined limits
pypdf is a free and open-source pure-python PDF library. Prior to 6.13.3, a maliciously crafted PDF can cause DoS. An attacker who uses this vulnerability can craft a PDF which leads to large memory usage, as MAXDECLAREDSTREAMLENGTH is sometimes ignored. This requires parsing a content stream...
EUVD-2026-40352
Vibe-Trading before 0.1.10 constructs the swarm run directory by joining a caller-supplied run identifier onto the runs base directory without validation in rundir agent/src/swarm/store.py. A crafted run identifier supplied through the MCP swarm tools causes the application to read arbitrary...
MINI-JPQP-HXR7-3RRC
Bulletin has no description...
BIT-NODE-2026-48936
A flaw in Node.js Permission API can cause a local server to be started via a Unix domain socket, even without the --allow-net permission. This vulnerability affects one supported release line: Node.js 26...
PT-2026-53429
Technical Description The OpenAPIProvider in FastMCP exposes internal APIs to MCP clients by parsing OpenAPI specifications. The RequestDirector class is responsible for constructing HTTP requests to the backend service. A critical vulnerability exists in the build url method. When an OpenAPI...