Macaron Notes 5.5 contains a denial of service vulnerability that allows attackers to crash the...
CVE-2021-47970
Macaron Notes 5.5 contains a denial of service vulnerability that allows attackers to crash the application by creating
#cwe-789
共收录 243 条相关情报。
← 返回所有主题Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note field...
CVE-2021-47973
该漏洞影响 Sticky Notes Widget 3.0.6 版本（iOS 平台）。攻击者无需身份验证（CVSS 攻击向量为网络，权限要求无，用户交互无），只需在笔记字段中粘贴超长字符串即可触发拒绝服务。具体来说，攻击者可以构造包含 35
Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character st...
CVE-2021-47972
Sticky Notes & Color Widgets 1.4.2 版本存在一个拒绝服务（DoS）漏洞。攻击者可以向笔记字段中粘贴超长的重复字符（例如数千个相同的字符）来触发该漏洞。由于应用未对用户输入进行长度限制，当处理这些超长字符串时
My Notes Safe 5.3 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attac...
CVE-2021-47971
CVE-2021-47971 是 My Notes Safe 5.3 版本中存在的一个拒绝服务（DoS）漏洞。攻击者无需身份验证即可利用此漏洞，通过向笔记字段粘贴超长字符串（350000 个重复字符）并重复粘贴两次，导致应用程序崩溃。该漏洞
Macaron Notes 5.5 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers ...
CVE-2021-47970
Macaron Notes 5.5 中存在一个拒绝服务漏洞。攻击者无需身份验证即可利用该漏洞，通过向笔记字段中粘贴包含约 350000 个重复字符的超长字符串，导致应用崩溃并停止响应。该漏洞源于对用户输入的长度缺乏有效限制，使得攻击者能够消
Color Notes 1.4 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attacke...
CVE-2021-47969
Color Notes 1.4 被发现存在拒绝服务漏洞（CVE-2021-47969）。攻击者无需身份验证即可通过网络利用此漏洞，通过向笔记字段粘贴包含约 350,000 个重复字符的超长字符串，并重复粘贴两次，即可导致应用停止响应，造成拒
Nerdbank.MessagePack is a NativeAOT-compatible MessagePack serialization library. Prior to 1.1.62, Nerdbank.MessagePack contains an uncontrolled stack allocation vulnerability i...
CVE-2026-44375
Nerdbank.MessagePack is a NativeAOT-compatible MessagePack serialization library. Prior to 1.1.62, Nerdbank.MessagePack
Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final, when decoding header blocks, the non-Huffman branch of io.netty.handler.codec.http3....
CVE-2026-42582
Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final, when decoding header blocks
A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may...
CVE-2026-42946
A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory
A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory allocation or an over-read of data. When scgi_pass or uw...
CVE-2026-42946
A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory
OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET. Prior to 0.2.0-alpha.1, when receiving responses from the OpAMP server over HTTP, the OpAMP client allocat...
CVE-2026-42348
OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET. Prior to 0.2.0-alpha.1, when receiving responses
memono Notepad 4.2 contains a denial of service vulnerability that allows attackers to crash the...
CVE-2021-47944
memono Notepad 4.2 contains a denial of service vulnerability that allows attackers to crash the application by pasting
memono Notepad 4.2 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character buffers into note fields. Atta...
CVE-2021-47944
memono Notepad 4.2 contains a denial of service vulnerability that allows attackers to crash the application by pasting
Russh is a Rust SSH client & server library. Prior to version 0.60.1, a pre-authentication denial-of-service vulnerability exists in the server's keyboard-interactive authentica...
CVE-2026-42189
Russh is a Rust SSH client & server library. Prior to version 0.60.1, a pre-authentication denial-of-service vulnerabili
ParquetSharp is a .NET library for reading and writing Apache Parquet files. From version 18.1.0 to before version 23.0.0.1, DecimalConverter.ReadDecimal makes a stackalloc usin...
CVE-2026-42241
ParquetSharp is a .NET library for reading and writing Apache Parquet files. From version 18.1.0 to before version 23.0.
rust-zserio has Unbounded Memory Allocation
### Impact When deserializing arrays, strings or bytes (blob) types zserio first reads the size of the variable, and th
Netty HTTP/3 QPACK literal unbounded allocation
CVE-2026-42582
### Summary When Netty decodes HTTP/3 headers, it sometimes runs `new byte[length]` using a length from the wire before
OpAMP client reads unbounded HTTP response bodies
CVE-2026-42348
### Summary When receiving responses from the OpAMP server over HTTP, the OpAMP client allocates an unbounded buffer to
Prometheus: Remote read endpoint allows denial of service via crafted snappy payload
CVE-2026-42154
### Impact The remote read endpoint (`/api/v1/read`) does not validate the declared decoded length in a snappy-compress
Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0...
CVE-2026-43868
Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.