Common Weakness Enumeration
CWE-606
AllowedUnchecked Input for Loop Condition
Abstraction: Base · Status: Draft
The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.
79 vulnerabilities reference this CWE, most recent first.
GHSA-P9H5-JM8X-MJM5
Vulnerability from github – Published: 2026-05-07 21:30 – Updated: 2026-09-17 12:31
VLAI
Details
Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.
Severity
7.5 (High)
{
"affected": [],
"aliases": [
"CVE-2026-39820"
],
"database_specific": {
"cwe_ids": [
"CWE-606",
"CWE-770"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-05-07T20:16:43Z",
"severity": "HIGH"
},
"details": "Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.",
"id": "GHSA-p9h5-jm8x-mjm5",
"modified": "2026-09-17T12:31:53Z",
"published": "2026-05-07T21:30:30Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65116"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:63022"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:62803"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:62754"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:62753"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:62407"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:62406"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:60520"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:60023"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:60018"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:59833"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:59830"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:59467"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:57914"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:57845"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:57487"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:57482"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:57401"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:57194"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:56854"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:56852"
},
{
"type": "WEB",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39820.json"
},
{
"type": "WEB",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
},
{
"type": "WEB",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"type": "WEB",
"url": "https://go.dev/issue/78566"
},
{
"type": "WEB",
"url": "https://go.dev/cl/759940"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:68527"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:68504"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:68334"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:67975"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:67974"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:67517"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:66327"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:66016"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65895"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65886"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65838"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65534"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65336"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65335"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65153"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65117"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:56789"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42644"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:34364"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:33150"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:33142"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:33123"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:33120"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:23264"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:23262"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:22121"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:22120"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:22112"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:56340"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54883"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54602"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54583"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54555"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54552"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54285"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54284"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54283"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54274"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:51112"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:50336"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:50300"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-PGXQ-GJ96-MQ7G
Vulnerability from github – Published: 2026-01-08 21:30 – Updated: 2026-06-30 03:35
VLAI
Details
Plesk Obsidian versions 8.0.1 through 18.0.73 are vulnerable to a Denial of Service (DoS) condition. The vulnerability exists in the get_password.php endpoint, where a crafted request containing a malicious payload can cause the affected web interface to continuously reload, rendering the service unavailable to legitimate users. An attacker can exploit this issue remotely without authentication, resulting in a persistent availability impact on the affected Plesk Obsidian instance.
Severity
7.5 (High)
{
"affected": [],
"aliases": [
"CVE-2025-65518"
],
"database_specific": {
"cwe_ids": [
"CWE-400",
"CWE-606"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-01-08T19:15:57Z",
"severity": "HIGH"
},
"details": "Plesk Obsidian versions 8.0.1 through 18.0.73 are vulnerable to a Denial of Service (DoS) condition. The vulnerability exists in the get_password.php endpoint, where a crafted request containing a malicious payload can cause the affected web interface to continuously reload, rendering the service unavailable to legitimate users. An attacker can exploit this issue remotely without authentication, resulting in a persistent availability impact on the affected Plesk Obsidian instance.",
"id": "GHSA-pgxq-gj96-mq7g",
"modified": "2026-06-30T03:35:24Z",
"published": "2026-01-08T21:30:34Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-65518"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2025-65518"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428098"
},
{
"type": "WEB",
"url": "https://docs.plesk.com/release-notes/obsidian/change-log"
},
{
"type": "WEB",
"url": "https://github.com/Jainil-89/CVE-2025-65518/blob/main/cve.md"
},
{
"type": "WEB",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-65518.json"
},
{
"type": "WEB",
"url": "http://plesk.com"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-PV35-7W89-V65C
Vulnerability from github – Published: 2026-09-21 12:32 – Updated: 2026-09-21 12:32
VLAI
Details
Temporal Server did not bound the work performed while searching for a Schedule's next action time. An authenticated caller with namespace write permission could create or update a Schedule that combines a fine-grained cadence with an exclusion calendar that rejects every candidate time, causing the server to evaluate excluded candidates without a per-search work budget. This can consume excessive CPU in Frontend and Schedule worker components. A persisted specification can also cause its backing Schedule Workflow to repeatedly fail and retry, allowing CPU consumption to continue without additional requests until the Schedule is deleted or its backing Workflow is terminated. Repeated or parallel exploitation can deny service. The issue affects availability only; it does not expose or modify Workflow data.
Severity
{
"affected": [],
"aliases": [
"CVE-2026-16652"
],
"database_specific": {
"cwe_ids": [
"CWE-606"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-09-21T12:17:10Z",
"severity": "HIGH"
},
"details": "Temporal Server did not bound the work performed while searching for a Schedule\u0027s next action time. An authenticated caller with namespace write permission could create or update a Schedule that combines a fine-grained cadence with an exclusion calendar that rejects every candidate time, causing the server to evaluate excluded candidates without a per-search work budget. This can consume excessive CPU in Frontend and Schedule worker components. A persisted specification can also cause its backing Schedule Workflow to repeatedly fail and retry, allowing CPU consumption to continue without additional requests until the Schedule is deleted or its backing Workflow is terminated. Repeated or parallel exploitation can deny service. The issue affects availability only; it does not expose or modify Workflow data.",
"id": "GHSA-pv35-7w89-v65c",
"modified": "2026-09-21T12:32:37Z",
"published": "2026-09-21T12:32:37Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16652"
},
{
"type": "WEB",
"url": "https://github.com/temporalio/temporal/pull/11014"
},
{
"type": "WEB",
"url": "https://github.com/temporalio/temporal/commit/c10c730e53ae394fffaefe44ba3722150fe40720"
},
{
"type": "WEB",
"url": "https://github.com/temporalio/temporal/releases/tag/v1.30.7"
},
{
"type": "WEB",
"url": "https://github.com/temporalio/temporal/releases/tag/v1.31.3"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"type": "CVSS_V4"
}
]
}
GHSA-RHH3-JPG6-66XH
Vulnerability from github – Published: 2026-08-06 20:01 – Updated: 2026-08-06 20:01
VLAI
Summary
Mermaid radar diagrams are vulnerable to DoS
Details
Impact
Mermaid radar diagrams allow arbitrary large values for ticks, which can cause high CPU usage, freezing the webpage/JavaScript process for long periods of time, until the process is eventually killed due to OOM/running out of memory.
Proof-of-concept
radar-beta
axis a, b
curve c {1, 1}
ticks 1000000000
Patches
Has the problem been patched? What versions should users upgrade to?
This problem has been patched by https://github.com/mermaid-js/mermaid/commit/59b22fad2b3bb04f87a476c84a8a2b24679e607e, which was released in Mermaid v11.16.1
Workarounds
Is there a way for users to fix or remediate the vulnerability without upgrading?
There are no known workarounds without updating to a patched version of mermaid.
References
Are there any links users can visit to find out more?
- https://github.com/mermaid-js/mermaid/commit/59b22fad2b3bb04f87a476c84a8a2b24679e607e
- https://github.com/mermaid-js/mermaid/releases/tag/mermaid%4011.16.1
Severity
{
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "mermaid"
},
"ranges": [
{
"events": [
{
"introduced": "11.6.0"
},
{
"fixed": "11.16.1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2026-71439"
],
"database_specific": {
"cwe_ids": [
"CWE-1322",
"CWE-606"
],
"github_reviewed": true,
"github_reviewed_at": "2026-08-06T20:01:07Z",
"nvd_published_at": null,
"severity": "MODERATE"
},
"details": "### Impact\n\nMermaid radar diagrams allow arbitrary large values for `ticks`, which can cause high CPU usage, freezing the webpage/JavaScript process for long periods of time, until the process is eventually killed due to OOM/running out of memory.\n\n#### Proof-of-concept\n\n```txt\nradar-beta\n axis a, b\n curve c {1, 1}\n ticks 1000000000\n```\n\n### Patches\n\n_Has the problem been patched? What versions should users upgrade to?_\n\nThis problem has been patched by https://github.com/mermaid-js/mermaid/commit/59b22fad2b3bb04f87a476c84a8a2b24679e607e, which was released in [Mermaid v11.16.1](https://github.com/mermaid-js/mermaid/releases/tag/mermaid%4011.16.1)\n\n### Workarounds\n\n_Is there a way for users to fix or remediate the vulnerability without upgrading?_\n\nThere are no known workarounds without updating to a patched version of mermaid.\n\n### References\n\n_Are there any links users can visit to find out more?_\n\n- https://github.com/mermaid-js/mermaid/commit/59b22fad2b3bb04f87a476c84a8a2b24679e607e\n- https://github.com/mermaid-js/mermaid/releases/tag/mermaid%4011.16.1",
"id": "GHSA-rhh3-jpg6-66xh",
"modified": "2026-08-06T20:01:07Z",
"published": "2026-08-06T20:01:07Z",
"references": [
{
"type": "WEB",
"url": "https://github.com/mermaid-js/mermaid/security/advisories/GHSA-rhh3-jpg6-66xh"
},
{
"type": "WEB",
"url": "https://github.com/mermaid-js/mermaid/pull/8022"
},
{
"type": "WEB",
"url": "https://github.com/mermaid-js/mermaid/commit/59b22fad2b3bb04f87a476c84a8a2b24679e607e"
},
{
"type": "PACKAGE",
"url": "https://github.com/mermaid-js/mermaid"
},
{
"type": "WEB",
"url": "https://github.com/mermaid-js/mermaid/releases/tag/mermaid%4011.16.1"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L",
"type": "CVSS_V4"
}
],
"summary": "Mermaid radar diagrams are vulnerable to DoS"
}
GHSA-RHJH-WQRX-9374
Vulnerability from github – Published: 2025-05-22 18:31 – Updated: 2025-05-22 18:31
VLAI
Details
Relative Path Traversal vulnerabilities in ASPECT allow access to file resources if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.
Severity
{
"affected": [],
"aliases": [
"CVE-2024-13931"
],
"database_specific": {
"cwe_ids": [
"CWE-606"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-22T18:15:40Z",
"severity": "HIGH"
},
"details": "Relative Path Traversal vulnerabilities in ASPECT allow access to file resources if session administrator credentials become compromised.\nThis issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.",
"id": "GHSA-rhjh-wqrx-9374",
"modified": "2025-05-22T18:31:16Z",
"published": "2025-05-22T18:31:16Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13931"
},
{
"type": "WEB",
"url": "https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021\u0026LanguageCode=en\u0026DocumentPartId=pdf\u0026Action=Launch"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:C/RE:X/U:X",
"type": "CVSS_V4"
}
]
}
GHSA-RVFM-5258-V4XJ
Vulnerability from github – Published: 2026-08-05 09:31 – Updated: 2026-08-05 18:31
VLAI
Details
An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.
This issue affects Apache Qpid Proton-Dotnet: through 1.0.0.
Users are recommended to upgrade to version 1.1.0, which fixes the issue.
Severity
6.5 (Medium)
{
"affected": [],
"aliases": [
"CVE-2026-67554"
],
"database_specific": {
"cwe_ids": [
"CWE-606"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-08-05T07:16:38Z",
"severity": "MODERATE"
},
"details": "An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.\n\nThis issue affects Apache Qpid Proton-Dotnet: through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue.",
"id": "GHSA-rvfm-5258-v4xj",
"modified": "2026-08-05T18:31:30Z",
"published": "2026-08-05T09:31:15Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67554"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread/5ndlowz29464ytj98gz9z9ljhwnmb2hm"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2026/08/04/25"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-VFV8-7H88-HJ2W
Vulnerability from github – Published: 2026-08-05 18:31 – Updated: 2026-08-05 18:31
VLAI
Details
A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to improper handling of malformed XMCP packets. An attacker could exploit this vulnerability by sending a malformed XMCP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload unexpectedly, resulting in a DoS condition. The attacker does not need the XMCP client username to exploit this vulnerability.
Severity
8.6 (High)
{
"affected": [],
"aliases": [
"CVE-2026-20301"
],
"database_specific": {
"cwe_ids": [
"CWE-606"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-08-05T17:16:50Z",
"severity": "HIGH"
},
"details": "A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\n\nThis vulnerability is due to improper handling of malformed XMCP packets. An attacker could exploit this vulnerability by sending a malformed XMCP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload unexpectedly, resulting in a DoS condition. The attacker does not need the XMCP client username to exploit this vulnerability.",
"id": "GHSA-vfv8-7h88-hj2w",
"modified": "2026-08-05T18:31:39Z",
"published": "2026-08-05T18:31:39Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20301"
},
{
"type": "WEB",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xmcp-thbAr34t"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-WMM6-PGP8-29HG
Vulnerability from github – Published: 2024-11-12 18:30 – Updated: 2024-11-12 22:59
Withdrawn 2024-11-12
VLAI
Summary
Duplicate Advisory: .NET and Visual Studio Denial of Service Vulnerability
Details
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-6x36-qxmj-rv4p. This link is maintained to preserve external references.
Original Description
.NET and Visual Studio Denial of Service Vulnerability
Severity
7.5 (High)
{
"affected": [
{
"package": {
"ecosystem": "NuGet",
"name": "System.Formats.Nrbf"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "9.0.0"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [],
"database_specific": {
"cwe_ids": [
"CWE-409",
"CWE-606"
],
"github_reviewed": true,
"github_reviewed_at": "2024-11-12T22:59:42Z",
"nvd_published_at": "2024-11-12T18:15:24Z",
"severity": "HIGH"
},
"details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-6x36-qxmj-rv4p. This link is maintained to preserve external references.\n\n## Original Description\n.NET and Visual Studio Denial of Service Vulnerability",
"id": "GHSA-wmm6-pgp8-29hg",
"modified": "2024-11-12T22:59:42Z",
"published": "2024-11-12T18:30:58Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43499"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43499"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
],
"summary": "Duplicate Advisory: .NET and Visual Studio Denial of Service Vulnerability",
"withdrawn": "2024-11-12T22:59:42Z"
}
GHSA-XM65-F955-G866
Vulnerability from github – Published: 2026-09-29 12:31 – Updated: 2026-09-29 12:31
VLAI
Details
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Severity
4.7 (Medium)
{
"affected": [],
"aliases": [
"CVE-2026-95394"
],
"database_specific": {
"cwe_ids": [
"CWE-606"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-09-29T10:17:15Z",
"severity": "MODERATE"
},
"details": "Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service",
"id": "GHSA-xm65-f955-g866",
"modified": "2026-09-29T12:31:30Z",
"published": "2026-09-29T12:31:30Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95394"
},
{
"type": "WEB",
"url": "https://gitlab.com/wireshark/wireshark/-/work_items/21523"
},
{
"type": "WEB",
"url": "https://www.wireshark.org/security/wnpa-sec-2026-98.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
Mitigation
Implementation
Do not use user-controlled data for loop conditions.
Mitigation
Implementation
Perform input validation.
No CAPEC attack patterns related to this CWE.