共收录 1181 条相关情报。
← 返回所有主题CVE-2026-53423
Allocation of Resources Without Limits or Throttling vulnerability in membraneframework membrane_mp4_plugin allows unaut
CVE-2026-1500
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.10.8, 18.11 before 18.11.5, a
CVE-2026-53460
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-
CVE-2026-46702
Russh is a Rust SSH client & server library. From version 0.34.0 to before version 0.61.1, when SSH compression is enabl
CVE-2026-46673
Russh is a Rust SSH client & server library. Prior to version 0.60.3, CryptoVec used unchecked capacity growth, unchecke
CVE-2026-45031
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-
CVE-2026-24720
CVE-2026-24720 影响 QNAP File Station 6（可能为 File Station 版本 6，确切版本范围未明确），是一个资源无限制分配或节流的漏洞。该漏洞允许已获得用户账户的远程攻击者通过恶意消耗系统资源，阻止其
CVE-2026-41726
When an application opts into DelegatingDeserializer, a producer can grow the consumer's heap without bound by sending r
CVE-2026-41716
Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, al
CVE-2026-41726
When an application opts into DelegatingDeserializer, a producer can grow the consumer's heap without bound by sending r
CVE-2026-41716
Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, al
CVE-2026-8469
### Summary An attacker who can deliver `psb-assign`, `psb-toggle`, `psb-set-theme`, `upper-tab-navigation`, `lower-tab-
CVE-2026-28237
Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially lead
CVE-2026-49955
Hermes WebUI before version 0.51.270 contains a resource exhaustion vulnerability that allows unauthenticated remote att
CVE-2026-42570
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the
CVE-2026-41851
Applications which accept user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of S
CVE-2026-41710
An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the applicati
CVE-2026-41007
Spring HATEOAS maintains an unbounded static cache of StringLinkRelation instances keyed on attacker-supplied strings.
CVE-2026-46340
For each non-complete SctpMessage fragment the handler does `fragments.put(streamId, Unpooled.wrappedBuffer(frag, byteBu
CVE-2026-45416
SslClientHelloHandler.decode() reads the 24-bit TLS handshake length and, when the ClientHello does not fit in the first