Bugsink: DOS using large numbers of event tags
### Summary In affected versions, Bugsink stores every tag supplied with an incoming event. An event with an unusually
#cwe-400
共收录 1396 条相关情报。
← 返回所有主题klever-go: REST API slow-header connection exhaustion via Gin Engine.Run
### Summary The Klever seednode REST API starts a Gin engine with `Engine.Run(restAPIInterface)`. In Gin v1.9.1, `Engin
klever-go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS
### Summary `networkMessenger.directMessageHandler` in `network/p2p/libp2p/netMessenger.go` spawns a fresh goroutine fo
Klever-Go KVM: Throttler slot leak in trie account-data sync causes epoch bootstrap / state sync DoS
CVE-2026-49343
## Summary The account-data trie syncers leak bounded throttler slots on error paths in `syncDataTrie()`. Each failed
Docling Core: Insufficient validation of image reference URIs
CVE-2026-44019
### Impact In versions `>= 2.5.0, = 2.74.1` ### Workarounds If upgrading is not immediately possible: - reject `file:`
Docling: Unsafe URI and Path Handling in HTML Backend
CVE-2026-47214
### Impact The HTML backend did not perform sufficient validation during resource handling: - Accepted `file://` URIs en
React Router vulnerable to DoS via unbounded path expansion in __manifest endpoint
CVE-2026-42342
There exists a potential DOS attack vector in React Router Framework Mode applications (as well as Remix v2.10.0 - 2.17.
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 is vulnerable to a HTTP denial of...
CVE-2026-36605
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 is vulnerable to a HTTP denial of service via a low numb
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 is vulnerable to a HTTP denial of service via a low number of crafted incomplete HTTP requests, causing a persist...
CVE-2026-36605
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 is vulnerable to a HTTP denial of service via a low numb
A flaw has been found in dask up to 3.0. Affected by this issue is the function nunique_approx of...
CVE-2026-10705
A flaw has been found in dask up to 3.0. Affected by this issue is the function nunique_approx of the file dask/datafram
A flaw has been found in dask up to 3.0. Affected by this issue is the function nunique_approx of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manip...
CVE-2026-10705
该漏洞影响 Python 并行计算库 Dask 的 3.0 及之前版本。问题存在于 dask/dataframe/hyperloglog.py 文件中的 nunique_approx 函数，该函数属于 HLL（HyperLogLog）处理器
A security flaw has been discovered in wonderwhy-er DesktopCommanderMCP up to 0.2.38. This...
CVE-2026-10691
A security flaw has been discovered in wonderwhy-er DesktopCommanderMCP up to 0.2.38. This impacts an unknown function o
A weakness has been identified in johnhuang316 code-index-mcp up to 2.14.0. Affected is the...
CVE-2026-10692
A weakness has been identified in johnhuang316 code-index-mcp up to 2.14.0. Affected is the function is_safe_regex_patte
Dräger Core 1.0.5 and Dräger M540 Converter Service 1.0.9 contain a denial of service...
CVE-2024-14036
Dräger Core 1.0.5 and Dräger M540 Converter Service 1.0.9 contain a denial of service vulnerability that allows network-
A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function...
CVE-2026-10650
A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lws_ssh_parse_plaintext of t
A weakness has been identified in johnhuang316 code-index-mcp up to 2.14.0. Affected is the function is_safe_regex_pattern of the component search_code_advanced. Executing a man...
CVE-2026-10692
CVE-2026-10692 影响 johnhuang316 开发的 code-index-mcp 组件（版本 <= 2.14.0）。该漏洞存在于 search_code_advanced 组件的 is_safe_regex_pattern
A security flaw has been discovered in wonderwhy-er DesktopCommanderMCP up to 0.2.38. This impacts an unknown function of the file src/search-manager.ts of the component start_s...
CVE-2026-10691
在 wonderwhy-er DesktopCommanderMCP 至 0.2.38 版本中存在安全漏洞，影响 src/search-manager.ts 文件中的 start_search 组件。攻击者可通过操纵 SearchResul
A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lws_ssh_parse_plaintext of the file plugins/protocol_lws_ssh_base/sshd.c of the compo...
CVE-2026-10650
A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lws_ssh_parse_plaintext of t
Dräger Core 1.0.5 and Dräger M540 Converter Service 1.0.9 contain a denial of service vulnerability that allows network-adjacent attackers to trigger high CPU load by sending sp...
CVE-2024-14036
Dräger Core 1.0.5 and Dräger M540 Converter Service 1.0.9 contain a denial of service vulnerability that allows network-
Dräger Infinity M300 patient worn monitors with software version VG2.x and earlier contain a...
CVE-2019-25724
Dräger Infinity M300 patient worn monitors with software version VG2.x and earlier contain a network-based denial of ser