Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the cryptographic verificati...

CVE-2026-44905

Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vul

历史摘要 · 未重新核验 · NVD

Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeli...

CVE-2026-43988

Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vul

历史摘要 · 未重新核验 · NVD

NiceGUI: Unauthenticated log-volume denial of service in dynamic resource routes

CVE-2026-45554

### Summary Two FastAPI routes that serve per-component static assets in NiceGUI accept a sub-path parameter that may r

历史摘要 · 未重新核验 · GitHub Advisory

OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages

CVE-2026-45685

### Summary Malformed MongoDB wire messages can trigger uncaught panics in the MongoDB TCP parser, allowing a remote un

历史摘要 · 未重新核验 · GitHub Advisory

OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent

CVE-2026-45676

### Summary OBI's replacement ELF parser trusts section offsets, counts, and string offsets from the executable file. A

历史摘要 · 未重新核验 · GitHub Advisory

multiparty: Denial of Service via Prototype Pollution leads to Uncaught Exception

CVE-2026-8161

### Impact multiparty@4.2.3 and lower versions are vulnerable to denial of service via uncaught exception. By sending a

历史摘要 · 未重新核验 · GitHub Advisory

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, a sandbox escape vulnerability in vm2 v3.10.5 allows any sandboxed code to crash the host Node.js process via a si...

CVE-2026-44001

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, a sandbox escape vulnerability in vm2 v3.10.5 allows any

历史摘要 · 未重新核验 · NVD

Granian is a Rust HTTP server for Python applications. From 0.2.0 to 2.7.4, Granian aborts a worker process if a WSGI application returns an invalid HTTP response header name or...

CVE-2026-42545

Granian is a Rust HTTP server for Python applications. From 0.2.0 to 2.7.4, Granian aborts a worker process if a WSGI ap

历史摘要 · 未重新核验 · NVD

Granian is a Rust HTTP server for Python applications. From 1.2.0 to 2.7.4, Granian aborts a worker process when an unauthenticated client sends a WebSocket upgrade request whos...

CVE-2026-42544

Granian is a Rust HTTP server for Python applications. From 1.2.0 to 2.7.4, Granian aborts a worker process when an unau

历史摘要 · 未重新核验 · NVD

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 to before 3.0.15, there is an unhandled exception (std:...

CVE-2026-42268

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.

历史摘要 · 未重新核验 · NVD

ZEBRA is a Zcash node written entirely in Rust. From zebrad versions 2.2.0 to before 4.3.1 and from zebra-rpc versions 1.0.0-beta.45 to before 6.0.2, a vulnerability in Zebra's ...

CVE-2026-41585

ZEBRA is a Zcash node written entirely in Rust. From zebrad versions 2.2.0 to before 4.3.1 and from zebra-rpc versions 1

历史摘要 · 未重新核验 · NVD

vm2 has a Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS)

CVE-2026-44001

### Summary A sandbox escape vulnerability in vm2 v3.10.5 allows any sandboxed code to crash the host Node.js process vi

历史摘要 · 未重新核验 · GitHub Advisory

scim_proton and kanidm_proto have an authenticated process abort via SCIM filter stack exhaustion

### Summary A single unauthenticated `GET` to any `/scim/v1/...` endpoint with a `?filter=` query string of a few thous

历史摘要 · 未重新核验 · GitHub Advisory

An issue was discovered in Vanetza V2X v26.02 allowing remote unauthorized attackers to cause a...

CVE-2026-37554

An issue was discovered in Vanetza V2X v26.02 allowing remote unauthorized attackers to cause a denial of service. The v

历史摘要 · 未重新核验 · GitHub Advisory

An issue was discovered in Vanetza V2X v26.02 allowing remote unauthorized attackers to cause a denial of service. The vulnerability exists in the GeoNetworking packet processin...

CVE-2026-37554

An issue was discovered in Vanetza V2X v26.02 allowing remote unauthorized attackers to cause a denial of service. The v

历史摘要 · 未重新核验 · NVD

A vulnerability has been found in aligungr UERANSIM up to 3.2.7. The affected element is the...

CVE-2026-7183

A vulnerability has been found in aligungr UERANSIM up to 3.2.7. The affected element is the function rls::DecodeRlsMess

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability has been found in aligungr UERANSIM up to 3.2.7. The affected element is the function rls::DecodeRlsMessage in the library src/lib/rls/rls_pdu.cpp of the compone...

CVE-2026-7183

A vulnerability has been found in aligungr UERANSIM up to 3.2.7. The affected element is the function rls::DecodeRlsMess

历史摘要 · 未重新核验 · NVD

Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalid_argument" exception, ultimately causing the ...

CVE-2026-5937

Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "

历史摘要 · 未重新核验 · NVD