https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:33:17 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/cleanstart-2026-am39668 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: apache-nifi</p> <p>Multiple security vulnerabilities affect the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: apache-nifi</p> <p>Multiple security vulnerabilities affect the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-am39668 https://cve.radiocsirt.org/vuln/euvd-2026-338165 EUVD-2026-338165 https://cve.radiocsirt.org/vuln/euvd-2026-338165 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14683 <p>A vulnerability was detected in HdrHistogram up to 2.2.2. Affected by this issue is the function org.HdrHistogram.AbstractHistogram.decodeFromCompressedByteBuffer of the file src/main/java/org/HdrHistogram/AbstractHistogram.java. The manipulation of the argument lengthOfCompressedContents results in uncontrolled memory allocation. The attack needs to be approached locally. The exploit is now public and may be used. It is still unclear if this vulnerability genuinely exists. This issue is disputed due to the potential lack of crossing of security boundaries and the pre-requisites for a successful attack.</p> <p>A vulnerability was detected in HdrHistogram up to 2.2.2. Affected by this issue is the function org.HdrHistogram.AbstractHistogram.decodeFromCompressedByteBuffer of the file src/main/java/org/HdrHistogram/AbstractHistogram.java. The manipulation of the argument lengthOfCompressedContents results in uncontrolled memory allocation. The attack needs to be approached locally. The exploit is now public and may be used. It is still unclear if this vulnerability genuinely exists. This issue is disputed due to the potential lack of crossing of security boundaries and the pre-requisites for a successful attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-14683 https://cve.radiocsirt.org/vuln/ghsa-xw83-8gp3-pg5q <p>A vulnerability was detected in HdrHistogram up to 2.2.2. Affected by this issue is the function org.HdrHistogram.AbstractHistogram.decodeFromCompressedByteBuffer of the file src/main/java/org/HdrHistogram/AbstractHistogram.java. The manipulation of the argument lengthOfCompressedContents results in uncontrolled memory allocation. The attack needs to be approached locally. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.</p> <p>A vulnerability was detected in HdrHistogram up to 2.2.2. Affected by this issue is the function org.HdrHistogram.AbstractHistogram.decodeFromCompressedByteBuffer of the file src/main/java/org/HdrHistogram/AbstractHistogram.java. The manipulation of the argument lengthOfCompressedContents results in uncontrolled memory allocation. The attack needs to be approached locally. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.</p> https://cve.radiocsirt.org/vuln/ghsa-xw83-8gp3-pg5q https://cve.radiocsirt.org/vuln/rhsa-2026:26989 <p>HdrHistogram: HdrHistogram: Denial of Service via uncontrolled memory allocation org.hdrhistogram/HdrHistogram: HdrHistogram: HdrHistogram: Denial of Service via uncontrolled memory allocation in decodeFromByteBuffer HdrHistogram: HdrHistogram: Local state issue via &#39;Count&#39; argument manipulation HdrHistogram: HdrHistogram: Data integrity impact due to incorrect comparison</p> <p>HdrHistogram: HdrHistogram: Denial of Service via uncontrolled memory allocation org.hdrhistogram/HdrHistogram: HdrHistogram: HdrHistogram: Denial of Service via uncontrolled memory allocation in decodeFromByteBuffer HdrHistogram: HdrHistogram: Local state issue via &#39;Count&#39; argument manipulation HdrHistogram: HdrHistogram: Data integrity impact due to incorrect comparison</p> https://cve.radiocsirt.org/vuln/rhsa-2026:26989 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-14683 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: hdrhistogram, Ubuntu:20.04:LTS: hdrhistogram, Ubuntu:22.04:LTS: hdrhistogram, Ubuntu:24.04:LTS: hdrhistogram, Ubuntu:25.10: hdrhistogram, Ubuntu:26.04:LTS: hdrhistogram</p> <p>A vulnerability was detected in HdrHistogram up to 2.2.2. Affected by this issue is the function org.HdrHistogram.AbstractHistogram.decodeFromCompressedByteBuffer of the file src/main/java/org/HdrHistogram/AbstractHistogram.java. The manipulation of the argument lengthOfCompressedContents results in uncontrolled memory allocation. The attack needs to be approached locally. The exploit is now public and may be used. It is still unclear if this vulnerability genuinely exists. This issue is disputed due to the potential lack of crossing of security boundaries and the pre-requisites for a successful attack.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: hdrhistogram, Ubuntu:20.04:LTS: hdrhistogram, Ubuntu:22.04:LTS: hdrhistogram, Ubuntu:24.04:LTS: hdrhistogram, Ubuntu:25.10: hdrhistogram, Ubuntu:26.04:LTS: hdrhistogram</p> <p>A vulnerability was detected in HdrHistogram up to 2.2.2. Affected by this issue is the function org.HdrHistogram.AbstractHistogram.decodeFromCompressedByteBuffer of the file src/main/java/org/HdrHistogram/AbstractHistogram.java. The manipulation of the argument lengthOfCompressedContents results in uncontrolled memory allocation. The attack needs to be approached locally. The exploit is now public and may be used. It is still unclear if this vulnerability genuinely exists. This issue is disputed due to the potential lack of crossing of security boundaries and the pre-requisites for a successful attack.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-14683