FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption...
CVE-2026-66037
FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF d
#cwe-770
共收录 1181 条相关情报。
← 返回所有主题react-server-dom: Denial of Service in Server Functions
CVE-2026-44907
### Impact A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server fu
webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules
CVE-2026-57497
## Summary An attacker can cause excessive memory allocation in webtransport-go by sending an unknown WebTransport caps
Cloudreve: Denial of Service - Image decompression / pixel bomb in thumbnail & avatar decoding crashes the server
CVE-2026-55497
## Summary Cloudreve's built-in image processor decodes user-supplied images with Go's standard-library decoders (`imag
Next.js: Unbounded Server Action payload in Edge runtime
CVE-2026-64646
## Impact Requests targeting Next.js applications using App Router with at least one Server Action can lead to excessiv
Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps
CVE-2026-59942
### Summary Dompdf v3.1.5 is vulnerable to a Denial of Service (DoS) attack via resource exhaustion. An attacker can cra
n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads
CVE-2026-58661
## Impact An authenticated user can repeatedly upload files to the data-table upload endpoint, bypassing the per-request
Netty: [HttpContentEncoder] Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service
CVE-2026-59899
### Impact `HttpContentEncoder` (the superclass of the production handler `HttpContentCompressor`) maintains a per-chann
An authenticated user can cause a {{mongod}} process to be terminated by the operating system under memory pressure by performing a specific data type conversion operation withi...
CVE-2026-13076
An authenticated user can cause a {{mongod}} process to be terminated by the operating system under memory pressure by p
An authenticated user can cause the mongod process to be terminated by the operating system under memory pressure via the $rankFusion and $scoreFusion aggregation stages. The is...
CVE-2026-13075
An authenticated user can cause the mongod process to be terminated by the operating system under memory pressure via th
An unauthenticated remote client can cause excessive CPU consumption on a MongoDB server by sending a specific combination of parameters to the awaitable hello command in exhaus...
CVE-2026-13074
An unauthenticated remote client can cause excessive CPU consumption on a MongoDB server by sending a specific combinati
An authenticated user can cause excessive CPU consumption or out-of-memory conditions on a MongoDB server by sending a crafted Queryable Encryption find payload containing an un...
CVE-2026-13069
An authenticated user can cause excessive CPU consumption or out-of-memory conditions on a MongoDB server by sending a c
Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.
CVE-2026-65650
Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.
CVE-2026-65650
CVE-2026-65650
Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.
A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send que...
CVE-2026-11622
A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runawa
Node.js Adapter for Hono: Unauthenticated memory-leak DoS via aborted WebSocket handshake
## Summary A WebSocket upgrade request to an `upgradeWebSocket` route with a missing or malformed `Sec-WebSocket-Key` h
gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities
Multiple security vulnerabilities have been identified and addressed in grpc-go affecting the xDS RBAC authorization eng
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
## Summary The fix released in jackson-core `2.18.6` and `2.21.1` for [GHSA-72hv-8253-57qq](https://github.com/FasterXM
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a...
CVE-2026-42397
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive A
Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom ser...
CVE-2026-15957
Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface