A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could lead ...

CVE-2026-90870

A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versi

来源摘录 · NVD

P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that names an unknown interface or object UUID, and does not start a timeout for it. Repeated re...

CVE-2026-115793

P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that names an unknown interface or obje

来源摘录 · NVD

P-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session when an RPC request is rejected because its data representation has incorrect endiannes...

CVE-2026-112200

P-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session when an RPC request is rejecte

来源摘录 · NVD

Echo is a Go web framework. From 4.15.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware can retain a handler, copy goroutines, and network connections after a WebSocket client d...

CVE-2026-118262

Echo is a Go web framework. From 4.15.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware can retain a handler, copy gorou

来源摘录 · NVD

Echo: WebSocket proxy can retain connections and handlers after client disconnect

## Impact Echo's Proxy middleware could retain a handler, copy goroutines and network connections after a WebSocket cli

历史摘要 · 未重新核验 · GitHub Advisory

storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the proc...

CVE-2026-114236

storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file

来源摘录 · NVD

One logical thread of a user-mode ThreadX module costs the Module Manager's shared object pool two allocations, not one. The module asks for a `TX_THREAD` control block through ...

CVE-2026-95108

One logical thread of a user-mode ThreadX module costs the Module Manager's shared object pool two allocations, not one.

历史摘要 · 未重新核验 · NVD

Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected,...

CVE-2026-77205

Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from t

历史摘要 · 未重新核验 · GitHub Advisory

The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayable_msg.c manages a static pool of CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_COUNT message c...

CVE-2026-19937

The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayable_msg.c manages a static po

历史摘要 · 未重新核验 · NVD

IBM Power Systems Firmware FW1110.00 through FW1110.31, FW1120.00 through FW1120.01, and FW1060.00 through FW1060.81 could allow a remote authenticated attacker to cause a denia...

CVE-2026-16678

IBM Power Systems Firmware FW1110.00 through FW1110.31, FW1120.00 through FW1120.01, and FW1060.00 through FW1060.81 cou

历史摘要 · 未重新核验 · NVD

The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains the receive node that carried an accepted LL_PHY_UPDATE_IND so that...

CVE-2026-19740

The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains the receiv

历史摘要 · 未重新核验 · NVD

The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retains the received RX node while a Connection Update / Connection Para...

CVE-2026-19739

The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retains the rec

历史摘要 · 未重新核验 · NVD

Bluetooth LE Controller: retained RX node leak and reachable assertion in the PHY Update procedure

CVE-2026-19740

The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains the receiv

历史摘要 · 未重新核验 · OSV.dev

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the multipart loop in internal/bodyprocessors/multipart.go executes...

CVE-2026-107834

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the multip

历史摘要 · 未重新核验 · NVD

OWASP Coraza WAF: Resource exhaustion via deferred file handle accumulation in multipart body processor

CVE-2026-107834

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the multip

历史摘要 · 未重新核验 · OSV.dev

A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel memory. The nscd door server procedure, switcher() in usr/sr...

CVE-2026-104112

A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel mem

历史摘要 · 未重新核验 · NVD

Missing release of passed file descriptors in illumos nscd allows local users to exhaust kernel memory

CVE-2026-104112

A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel mem

历史摘要 · 未重新核验 · OSV.dev

Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early

CVE-2026-107286

> This issue was posted by Codex Desktop using gpt-6.1-sol on behalf of David. ### Summary Applications that wrap a mo

历史摘要 · 未重新核验 · GitHub Advisory

A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race...

CVE-2026-104045

A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autof

历史摘要 · 未重新核验 · GitHub Advisory

A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous enumeration completion a...

CVE-2026-104045

A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autof

历史摘要 · 未重新核验 · NVD