strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.
CVE-2026-78129
strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.
#cwe-835
共收录 281 条相关情报。
← 返回所有主题strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.
CVE-2026-78132
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax
strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.
CVE-2026-78129
strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.
Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle
CVE-2026-87013
## Summary Any authenticated user can move one of their own folders under itself, leaving a loop in their folder tree. T
zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to trigger infinite loops. Attack...
CVE-2026-89045
zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.rea
zstd-jni 1.4.8-4 through 1.5.7-13 Denial of Service via Negative Length
CVE-2026-89045
zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.rea
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.1, the message-chain reconstruction helper in backend/open_webui/util...
CVE-2026-88002
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.1, the messa
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/chats/{id}/messages/{message_id} used the chat-his...
CVE-2026-88000
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /
Open WebUI: Any authenticated user can hang the server via a cyclic chat message history
CVE-2026-88002
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.1, the messa
Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree
CVE-2026-88000
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/v1/folders/{id}/update/parent allowed a user to place a...
CVE-2026-87013
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /ap
Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle
CVE-2026-87013
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /ap
libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to...
CVE-2026-6554
libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via bac
libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop ite...
CVE-2026-6554
libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via bac
smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse() can enter an infinite loop when a value inside an array or inline table is followed b...
CVE-2026-85730
smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse() can enter an infinite loop w
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to...
CVE-2026-78543
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 1
smol-toml: Denial of Service via malformed TOML documents
CVE-2026-85730
smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse() can enter an infinite loop w
pypdf: Possible infinite loop for TreeObject.insert_child
CVE-2026-84309
### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires a (us
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/_data_structures.py TreeOb...
CVE-2026-84309
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree
pypdf: Possible infinite loop for TreeObject.insert_child
CVE-2026-84309
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree