كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 11 من 11

• متوسطةCVE-2026-71436درجة CVSS 5.306‏/08‏/2026

  Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 10.6.0 until 10.9.8 and 11.16.1, Mermaid XY Charts are vulnerable to an infinite loop denial of service in the setXAxisRangeData function when

  CWE-835CWE-1325
• متوسطةCVE-2026-18772درجة CVSS 6.504‏/08‏/2026

  Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.

  CWE-1325
• متوسطةCVE-2026-54081درجة CVSS 6.929‏/07‏/2026

  veraPDF PDF parser is a PDF parser for veraPDF. Prior to 1.30.2 and 1.31.23, veraPDF-parser contains a denial-of-service vulnerability in veraPDF-parser/src/main/java/org/verapdf/pd/font/type1/Type1FontProgram.java and veraPDF-parser/src/main/java/org/verapdf/

  CWE-1325
• متوسطةCVE-2026-54080درجة CVSS 6.929‏/07‏/2026

  veraPDF PDF parser is a PDF parser for veraPDF. Prior to 1.30.2 and 1.31.23, veraPDF-parser contains a denial-of-service vulnerability in veraPDF-parser/src/main/java/org/verapdf/pd/font/cmap/CMapParser.java and veraPDF-parser/src/main/java/org/verapdf/parser/

  CWE-1325
• متوسطةCVE-2026-13056درجة CVSS 6.522‏/07‏/2026

  Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error.

  CWE-1325mongodb mongodb
• عاليةCVE-2026-34183درجة CVSS 7.509‏/06‏/2026

  Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATH_CHALLENGE frames. Impact summary: A malicious remote peer can cause an unbounded memory allocation which can lead to an abnormal termina

  CWE-1325openssl openssl
• متوسطةCVE-2026-8199درجة CVSS 6.513‏/05‏/2026

  An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to memory pressure and may lead to availability loss by OOM. This issue impacts Mong

  CWE-1325mongodb mongodb
• متوسطةCVE-2026-6869درجة CVSS 5.530‏/04‏/2026

  WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

  CWE-1325wireshark wireshark
• متوسطةCVE-2026-6867درجة CVSS 5.530‏/04‏/2026

  SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

  CWE-1325wireshark wireshark
• متوسطةCVE-2026-6535درجة CVSS 5.530‏/04‏/2026

  Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

  CWE-1325wireshark wireshark
• متوسطةCVE-2026-6533درجة CVSS 5.530‏/04‏/2026

  Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

  CWE-1325wireshark wireshark