CWE-400

Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applicat

CVE-2026-33444 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with intimate kno

CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55. Attackers with

NLTK versions before 3.10.3 contain a quadratic CPU exhaustion vulnerability in XMLCorpusView._read_xml_fragment() that

NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attac

A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner

A vulnerability has been found in Radare2 5.9.9. This issue affects the function walk_exports_trie of the file libr/bin/

A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file

A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidx_box_read of the file sr

A flaw has been found in kokke tiny-regex-c up to f2632c6d9ed25272987471cdb8b70395c2460bdb. This vulnerability affects t

A vulnerability was detected in HdrHistogram up to 2.2.2. Affected by this issue is the function org.HdrHistogram.Abstra

A flaw has been found in HdrHistogram up to 2.2.2. This affects the function org.HdrHistogram.AbstractHistogram.decodeFr

Vulnerability in the GoldenGate Stream Analytics product of Oracle GoldenGate (component: Security). The supported ver

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, Integer Underflow in update_read_cache

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.3, `ExtractPluginFromImage()` i

A flaw has been found in dask up to 3.0. Affected by this issue is the function nunique_approx of the file dask/datafram

Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Sup

Vulnerability in the Oracle Inventory Optimization product of Oracle E-Business Suite (component: User Interface). Supp

Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Support

OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init command when processing malic

A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML

ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the

Tanium addressed an uncontrolled resource consumption vulnerability in Interact.

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that

The Nuvoton NuMaker HSUSBD USB device-controller driver (drivers/usb/udc/udc_numaker.c) armed the control Data IN stage

HCL AION is affected by a vulnerability related to the handling of upload size limits. Improper control or validation of

The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV

The massive sending of ICMP requests causes a denial of service on one of the boards from the EVCharger that allows cont

An attacker with access to the system's internal network can cause a denial of service on the system by making two concu

facil.io is a C micro-framework for web applications. Prior to commit 5128747363055201d3ecf0e29bf0a961703c9fa0, `fio_jso

Following the initial publication of the Security Advisory about a denial of service (DoS) condition in Cisco Crosswork

Uncontrolled Resource Consumption vulnerability in ericmj decimal allows unauthenticated remote Denial of Service. The

SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE for SolidCAM. From version 1.0.

FastGPT is an AI Agent building platform. In versions 4.14.13 and prior, the code-sandbox component suffers from insuffi

Uncontrolled Resource Consumption vulnerability in oban-bg oban_web ('Elixir.Oban.Web.CronExpr' modules) allows memory e

Uncontrolled Resource Consumption vulnerability in the Elixir standard library's Version module allows an attacker who c

Kanidm is an identity management platform. Prior to version 1.9.3, a single unauthenticated GET to any /scim/v1/... endp

FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as template

vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, users can reset their

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent

Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Gogs built-in Go SSH server is vulnerable to an una

decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits input on '%' produci

brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time comple

The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP serve

NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's .NET single-f