Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, DNP3 reassembly could b...

CVE-2026-45765

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

历史摘要 · 未重新核验 · NVD

mistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS

## Unbounded Remote Media Fetch and Video Frame Expansion DoS ### Summary The `POST /v1/chat/completions` endpoint in m

历史摘要 · 未重新核验 · GitHub Advisory

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata could repeated...

CVE-2026-45759

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

历史摘要 · 未重新核验 · NVD

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerabi...

CVE-2026-9338

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafte

历史摘要 · 未重新核验 · NVD

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authoriz...

CVE-2026-87106

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenti

历史摘要 · 未重新核验 · NVD

GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion ...

CVE-2026-88290

GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefini

历史摘要 · 未重新核验 · NVD

GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block the accept loop and prevent new PTZ connections.

CVE-2026-88286

GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block t

历史摘要 · 未重新核验 · NVD

A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack. Successful exploitation...

CVE-2026-73786

A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct

历史摘要 · 未重新核验 · NVD

Nodemailer: Quadratic (O(n²)) time complexity in addressparser allows remote denial of service via a crafted address list

### Summary Nodemailer's address parser (`lib/addressparser/index.js`) parses a list of comma‑separated addresses in **

历史摘要 · 未重新核验 · GitHub Advisory

multer vulnerable to Denial of Service via file descriptor leak on aborted uploads

CVE-2026-77037

### Impact A vulnerability in multer `2.2.0` allows an attacker to trigger a Denial of Service (DoS) by aborting or tru

历史摘要 · 未重新核验 · GitHub Advisory

multer vulnerable to Denial of Service via oversized array index in field names

CVE-2026-82333

### Impact multer is vulnerable to a Denial of Service (DoS) via a crafted array index in multipart field names. The `a

历史摘要 · 未重新核验 · GitHub Advisory

js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources

CVE-2026-84375

## Summary `maxTotalMergeKeys` does not count empty mappings. An attacker can repeatedly merge a large sequence of them

历史摘要 · 未重新核验 · GitHub Advisory

Tiptap: Quadratic ReDoS in block and inline Markdown attribute parsing

## Summary `@tiptap/core` contains two quadratic regular-expression denial-of-service paths in its default Markdown att

历史摘要 · 未重新核验 · GitHub Advisory

Hono: Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustion

CVE-2026-84364

### Summary When `parseBody()` expands dot-separated form field names into nested objects, it does not limit the nestin

历史摘要 · 未重新核验 · GitHub Advisory

Snipe-IT before 8.7.1 fails to validate the length of the note field in the POST /account/accept/{acceptance} endpoint, allowing authenticated users to submit unbounded input th...

CVE-2026-86734

Snipe-IT before 8.7.1 fails to validate the length of the note field in the POST /account/accept/{acceptance} endpoint,

历史摘要 · 未重新核验 · NVD

A Cross-Site Request Forgery (CSRF) vulnerability in WatchGuard Dimension's database snapshot creation feature allows a remote attacker to trigger unauthorized snapshot creation...

CVE-2026-86135

A Cross-Site Request Forgery (CSRF) vulnerability in WatchGuard Dimension's database snapshot creation feature allows a

历史摘要 · 未重新核验 · NVD

Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Field

CVE-2026-86734

Snipe-IT before 8.7.1 fails to validate the length of the note field in the POST /account/accept/{acceptance} endpoint,

历史摘要 · 未重新核验 · OSV.dev

A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never unblocked, eventually causing all threads to be blocked and the whole server t...

CVE-2026-12611

A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never unblocked, eventually

历史摘要 · 未重新核验 · NVD

CVE-2026-12611

CVE-2026-12611

A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never unblocked, eventually

历史摘要 · 未重新核验 · OSV.dev

A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function...

CVE-2026-86515

A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function add_entry of the file src/

历史摘要 · 未重新核验 · GitHub Advisory