SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE for SolidCAM. From version 1.0.0 to before version 1.0.2, Opening a .gpp file in the Sol...

CVE-2026-42212

SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE for SolidCAM. From version 1.0.

历史摘要 · 未重新核验 · NVD

Volcano's webhook server vulnerable to OOM due to unbounded HTTP request body size

CVE-2026-44247

### Impact The Volcano webhook server does not enforce a size limit on incoming HTTP request bodies. Any in-cluster pod

历史摘要 · 未重新核验 · GitHub Advisory

An issue in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code via the dash_uploader/httprequesthandler.py, dash_uploader/upload...

CVE-2026-38361

An issue in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code via the

历史摘要 · 未重新核验 · NVD

Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) allows a remote attacker to cause a denial of service (device crash) via crafted packet data to the SMB service on TC...

CVE-2024-27686

Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) allows a remote attacker to cause a denial of service (devic

历史摘要 · 未重新核验 · NVD

The socket connection handler in aswArPot.sys in the Avast and AVG Windows Anti Rootkit driver before 22.1 allows local attackers to execute arbitrary code in kernel mode or cau...

CVE-2022-26523

The socket connection handler in aswArPot.sys in the Avast and AVG Windows Anti Rootkit driver before 22.1 allows local

历史摘要 · 未重新核验 · NVD

A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function...

CVE-2026-8124

A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidx_box_read of the file sr

历史摘要 · 未重新核验 · GitHub Advisory

A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidx_box_read of the file src/isomedia/box_code_base.c. The manipulation leads to all...

CVE-2026-8124

A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidx_box_read of the file sr

历史摘要 · 未重新核验 · NVD

Regex Denial of Service in youtube-regex npm package through version 1.0.5.

CVE-2025-65122

Regex Denial of Service in youtube-regex npm package through version 1.0.5.

历史摘要 · 未重新核验 · GitHub Advisory

Regex Denial of Service in youtube-regex npm package through version 1.0.5.

CVE-2025-65122

Regex Denial of Service in youtube-regex npm package through version 1.0.5.

历史摘要 · 未重新核验 · NVD

Uncontrolled Resource Consumption vulnerability in ericmj decimal allows unauthenticated remote Denial of Service. The decimal library does not bound the exponent on parsed inp...

CVE-2026-32686

Uncontrolled Resource Consumption vulnerability in ericmj decimal allows unauthenticated remote Denial of Service. The

历史摘要 · 未重新核验 · NVD

Netty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy leads to decompression bomb DoS

CVE-2026-42587

## Summary `HttpContentDecompressor` accepts a `maxAllocation` parameter to limit decompression buffer size and prevent

历史摘要 · 未重新核验 · GitHub Advisory

Netty Lz4FrameDecoder is vulnerable to resource exhaustion

CVE-2026-42583

### Summary Lz4FrameDecoder allocates a ByteBuf of size `decompressedLength` (up to 32 MB per block) before LZ4 runs. A

历史摘要 · 未重新核验 · GitHub Advisory

Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder)

CVE-2026-42579

# Security Vulnerability Report: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder) ## 1. Vulnerability Sum

历史摘要 · 未重新核验 · GitHub Advisory

Hono: bodyLimit() can be bypassed for chunked / unknown-length requests

CVE-2026-44456

## Summary `bodyLimit()` does not reliably enforce `maxSize` for requests without a usable `Content-Length` (e.g. `Tran

历史摘要 · 未重新核验 · GitHub Advisory

scim_proton and kanidm_proto have an authenticated process abort via SCIM filter stack exhaustion

### Summary A single unauthenticated `GET` to any `/scim/v1/...` endpoint with a `?filter=` query string of a few thous

历史摘要 · 未重新核验 · GitHub Advisory

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cache accepts unbounded key grow...

CVE-2026-41310

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin

历史摘要 · 未重新核验 · NVD

Unauthenticated DoS in ZTE H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H208N, H367N, H181A, and H196Q. A denial-of-service condit...

CVE-2026-34473

Unauthenticated DoS in ZTE H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H

历史摘要 · 未重新核验 · NVD

phpseclib has a CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID()

CVE-2026-44167

### Impact Anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc) ### Patch

历史摘要 · 未重新核验 · GitHub Advisory

@evomap/evolver has an unbounded request body in proxy /asset/submit that causes persistent disk-exhaustion DoS

## Summary The EvoMap proxy daemon's HTTP body parser accepts requests of any size, and the `POST /asset/submit` route

历史摘要 · 未重新核验 · GitHub Advisory

Twisted has a Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains

CVE-2026-42304

### Details The twisted.names module is vulnerable to a Denial of Service (DoS) attack via resource exhaustion during D

历史摘要 · 未重新核验 · GitHub Advisory