IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to unbounded recursion.

CVE-2026-16824

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to unbounde

历史摘要 · 未重新核验 · NVD

GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)

GeoLens 1.2.4 fixes a set of vulnerabilities, the most serious of which allow authenticated or anonymous users to obtain

历史摘要 · 未重新核验 · GitHub Advisory

MCP PHP SDK: client HttpTransport SSE buffer (sseBuffer .= chunk) grows unbounded when server withholds the event delimiter

CVE-2026-53965

## Summary The HTTP client transport in `mcp/sdk` reads a Server-Sent-Events (SSE) response stream incrementally and ap

历史摘要 · 未重新核验 · GitHub Advisory

Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoS

CVE-2026-53941

## Summary An unprivileged container can block all other containers from starting on the same host by placing a crafted

历史摘要 · 未重新核验 · GitHub Advisory

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper handling of memory page table configurations.

CVE-2026-19653

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper

历史摘要 · 未重新核验 · NVD

The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. In 4.19.2 and 4.20.2, the library permits attacker-controlled XPath transforms while processing...

CVE-2026-49289

The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. In 4.19.2 and 4.20.2, the library perm

历史摘要 · 未重新核验 · NVD

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

CVE-2026-16818

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontro

历史摘要 · 未重新核验 · NVD

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

CVE-2026-16690

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontro

历史摘要 · 未重新核验 · NVD

MobSF is a mobile application security testing tool used. Prior to 4.5.1, the unzip function in mobsf/StaticAnalyzer/views/common/shared_func.py logs that an archive member exce...

CVE-2026-68924

MobSF is a mobile application security testing tool used. Prior to 4.5.1, the unzip function in mobsf/StaticAnalyzer/vie

历史摘要 · 未重新核验 · NVD

The Entries component in Brainstorm Force SureForms version, less than 2.12.3, does not enforce adequate limits on user-controlled form fields or submitted content during proces...

CVE-2026-19500

The Entries component in Brainstorm Force SureForms version, less than 2.12.3, does not enforce adequate limits on user-

历史摘要 · 未重新核验 · NVD

SiYuan before v3.7.4 contains an insufficient access control vulnerability in the /api/lute/spinBlockDOM endpoint, which is guarded only by CheckAuth middleware instead of Check...

CVE-2026-74903

SiYuan before v3.7.4 contains an insufficient access control vulnerability in the /api/lute/spinBlockDOM endpoint, which

历史摘要 · 未重新核验 · NVD

The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an image may lead to a denial-of-service.

CVE-2026-65347

The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. P

历史摘要 · 未重新核验 · NVD

An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service...

CVE-2026-68005

An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request he

历史摘要 · 未重新核验 · GitHub Advisory

Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.300, a connected peer can send repeated DCLP DataChunk messages to ClipboardChunk::assemb...

CVE-2026-65976

Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.300, a connected peer can send r

历史摘要 · 未重新核验 · NVD

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the /v1/completions/derender and /v1/chat/completions/derender endpoints accept caller-suppli...

CVE-2026-71486

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the /v1/completions/derender and /v1

历史摘要 · 未重新核验 · NVD

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.sctp.SctpMessageCompletionHandler limits in...

CVE-2026-59902

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.

历史摘要 · 未重新核验 · NVD

Netty: Memory Exhaustion in SctpMessageCompletionHandler

CVE-2026-59902

### Summary SctpMessageCompletionHandler does not limit the total size of buffered fragments, allowing an unauthenticate

历史摘要 · 未重新核验 · GitHub Advisory

sqlparse: Quadratic O(n²) DoS in group_comments

CVE-2026-71491

### Summary A comment-only statement (`-- c\n`*n) may cause a Denial of Service (DoS). ### Details Location: [sqlparse/

历史摘要 · 未重新核验 · GitHub Advisory

Scriban before 7.0.0 (affected <= 6.6.0) applies its LoopLimit constraint only to script loop...

CVE-2026-74789

Scriban before 7.0.0 (affected <= 6.6.0) applies its LoopLimit constraint only to script loop statements and not to expe

历史摘要 · 未重新核验 · GitHub Advisory

OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init...

CVE-2026-74797

OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init command when processing malic

历史摘要 · 未重新核验 · GitHub Advisory