共收录 243 条相关情报。
← 返回所有主题CVE-2026-77354
kin-openapi is a Go project for handling OpenAPI files. From 0.124.0 until 0.142.0, openapi3filter.sliceMapToSlice in op
CVE-2026-77354
### Summary An uncontrolled resource consumption vulnerability in `openapi3filter` lets any unauthenticated client forc
CVE-2026-44253
Wazuh is a free and open source platform used for threat prevention, detection, and response. From 3.9.0 until 4.14.5 an
CVE-2026-75935
Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actor
CVE-2026-69219
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.
CVE-2026-46603
VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image
CVE-2026-72687
A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged
CVE-2026-72678
Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memor
CVE-2026-72645
Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Alloc
CVE-2026-72687
A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged
CVE-2026-72678
Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memor
CVE-2026-72656
Memory Allocation with Excessive Size Value (CWE-789) in the ES|QL query processing of Elasticsearch can lead to denial
CVE-2026-72645
Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Alloc
CVE-2026-72639
Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the
CVE-2026-19566
Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix
CVE-2026-17535
Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which may be triggered by
CVE-2026-71218
A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the `JSON_read()` function,
CVE-2026-15567
A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token dec
CVE-2026-66485
GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at src/makepath.c. The function us
CVE-2026-44630
Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to caus