agentprime: Denial of serviceEvery new Denial of service Advisory and CVE.https://agentprime.io/CVE-2026-77299: Regexp2: Unbounded memory amplification via large `{m}` quantifier on a zero-width subexpressionhttps://agentprime.io/advisories/CVE-2026-77299/https://agentprime.io/advisories/CVE-2026-77299/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 01:28:58 GMTCVECVE-2026-76181: Heap buffer overflow in dBASE index importhttps://agentprime.io/advisories/CVE-2026-76181/https://agentprime.io/advisories/CVE-2026-76181/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:57:48 GMTCVECVE-2026-116787: FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Lengthhttps://agentprime.io/advisories/CVE-2026-116787/https://agentprime.io/advisories/CVE-2026-116787/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:24:15 GMTCVECVE-2026-123273: ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoderhttps://agentprime.io/advisories/CVE-2026-123273/https://agentprime.io/advisories/CVE-2026-123273/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 18:45:36 GMTCVEfilecoin-pin: Unbounded DAG pinning can exhaust server resourceshttps://agentprime.io/advisories/GHSA-m5ph-mmg5-6w5h/https://agentprime.io/advisories/GHSA-m5ph-mmg5-6w5h/filecoin-pin <1.1.1, fixed in 1.1.1. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 05 Nov 2026 18:07:30 GMTnpmfilecoin-pinCVE-2026-107359: Malformed Wi-Fi Beacon Causes Crash on WF200https://agentprime.io/advisories/CVE-2026-107359/https://agentprime.io/advisories/CVE-2026-107359/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:37:53 GMTCVECVE-2026-82965: Keycloak-services: keycloak-services: unauthenticated denial of service via saml soap endpoint unbounded xml parsinghttps://agentprime.io/advisories/CVE-2026-82965/https://agentprime.io/advisories/CVE-2026-82965/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:14:20 GMTCVECVE-2026-49407: OpenHuman: Unauthenticated dictation WebSocket allows arbitrary audio streaming and unbounded memory growthhttps://agentprime.io/advisories/CVE-2026-49407/https://agentprime.io/advisories/CVE-2026-49407/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:46:35 GMTCVECVE-2026-110932: Keycloak-services: keycloak-services: unauthenticated persistent disk exhaustion via theme gzip cachehttps://agentprime.io/advisories/CVE-2026-110932/https://agentprime.io/advisories/CVE-2026-110932/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:04:56 GMTCVECVE-2026-110931: Keycloak-services: keycloak-services: unauthenticated jvm termination via saml 1.1 authoritybinding parsing loophttps://agentprime.io/advisories/CVE-2026-110931/https://agentprime.io/advisories/CVE-2026-110931/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:04:53 GMTCVECVE-2026-107602: Keycloak-services: keycloak-services: unauthenticated cpu exhaustion via saml 1.1 keyinfo infinite loophttps://agentprime.io/advisories/CVE-2026-107602/https://agentprime.io/advisories/CVE-2026-107602/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:04:51 GMTCVECVE-2026-107123: Keycloak-services: keycloak-services: unauthenticated cpu denial of service via saml xml datetime and duration parsinghttps://agentprime.io/advisories/CVE-2026-107123/https://agentprime.io/advisories/CVE-2026-107123/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:04:47 GMTCVECVE-2026-123096: anacrolix/torrent through 1.61.0 Memory Exhaustion via Unbounded HTTP Tracker Responsehttps://agentprime.io/advisories/CVE-2026-123096/https://agentprime.io/advisories/CVE-2026-123096/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 15:11:50 GMTCVECVE-2026-122330: Blosc c-blosc2 before 3.5.0 Divide-by-Zero via blosc2_schunk_get_slice_buffer()https://agentprime.io/advisories/CVE-2026-122330/https://agentprime.io/advisories/CVE-2026-122330/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 15:11:48 GMTCVECVE-2026-64860: espressif/mdns has Uncontrolled Recursion in mDNS Name Decompressionhttps://agentprime.io/advisories/CVE-2026-64860/https://agentprime.io/advisories/CVE-2026-64860/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 14:11:08 GMTCVECVE-2026-74841: Apache OFBiz: Denial of Service via unauthenticated userTenantId in multitenant modehttps://agentprime.io/advisories/CVE-2026-74841/https://agentprime.io/advisories/CVE-2026-74841/Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 14:09:41 GMTCVECVE-2026-82904: Apache OFBiz: Unbounded multi-form row count from a parameter namehttps://agentprime.io/advisories/CVE-2026-82904/https://agentprime.io/advisories/CVE-2026-82904/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 14:04:40 GMTCVECVE-2026-73095: Apache Juneau: Denial of service via unbounded memory allocation in parsers and REST request handlinghttps://agentprime.io/advisories/CVE-2026-73095/https://agentprime.io/advisories/CVE-2026-73095/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 11:48:25 GMTCVECVE-2026-112072: vault-java-driver: stored deeply nested JSON kills every thread that reads ithttps://agentprime.io/advisories/CVE-2026-112072/https://agentprime.io/advisories/CVE-2026-112072/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 07:57:30 GMTCVECVE-2026-33971: Uncontrolled resource consumption in Samsung Semiconductor Exynos 850 and othershttps://agentprime.io/advisories/CVE-2026-33971/https://agentprime.io/advisories/CVE-2026-33971/Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:37:26 GMTCVECVE-2026-33969: Infinite loop in Samsung Semiconductor Exynos 850 and othershttps://agentprime.io/advisories/CVE-2026-33969/https://agentprime.io/advisories/CVE-2026-33969/Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:37:19 GMTCVECVE-2026-122309: Kyverno before 1.19.2 Denial of Service via Unbounded CEL Policy Evaluation Costhttps://agentprime.io/advisories/CVE-2026-122309/https://agentprime.io/advisories/CVE-2026-122309/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:12 GMTCVECVE-2026-122306: Kyverno before 1.19.2 Denial of Service via Exponential-Time Wildcard Matchinghttps://agentprime.io/advisories/CVE-2026-122306/https://agentprime.io/advisories/CVE-2026-122306/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:10 GMTCVECVE-2026-122305: Kyverno before 1.19.2 Denial of Service via Nested Variable Substitution Loophttps://agentprime.io/advisories/CVE-2026-122305/https://agentprime.io/advisories/CVE-2026-122305/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:09 GMTCVECVE-2026-122052: laspy LAS File lasreader.py memory allocationhttps://agentprime.io/advisories/CVE-2026-122052/https://agentprime.io/advisories/CVE-2026-122052/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 00:15:21 GMTCVECVE-2026-76893: tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clientshttps://agentprime.io/advisories/CVE-2026-76893/https://agentprime.io/advisories/CVE-2026-76893/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:10:24 GMTCVECVE-2026-63655: tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoShttps://agentprime.io/advisories/CVE-2026-63655/https://agentprime.io/advisories/CVE-2026-63655/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:01:50 GMTCVECVE-2026-122020: NST Labs Tech Nstbrowser Local Agent Management Service stopAll stopAllBrowsers denial of servicehttps://agentprime.io/advisories/CVE-2026-122020/https://agentprime.io/advisories/CVE-2026-122020/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:00:18 GMTCVECVE-2026-55367: h2o: heap exhaustion using capsuleshttps://agentprime.io/advisories/CVE-2026-55367/https://agentprime.io/advisories/CVE-2026-55367/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:39:41 GMTCVECVE-2026-108838: Multiple vulnerabilities that affects IBM Db2 Genius Hubhttps://agentprime.io/advisories/CVE-2026-108838/https://agentprime.io/advisories/CVE-2026-108838/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:58:36 GMTCVECVE-2026-122129: CESNET ipfixcol2 2.7.1 before 2.9.0 Memory Exhaustion via TCP LZ4 Decoderhttps://agentprime.io/advisories/CVE-2026-122129/https://agentprime.io/advisories/CVE-2026-122129/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:36:49 GMTCVECVE-2026-97705: Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parserhttps://agentprime.io/advisories/CVE-2026-97705/https://agentprime.io/advisories/CVE-2026-97705/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 19:28:56 GMTCVECVE-2026-97701: Zulip: Missing content-length limit on POST /messages/render allows denial-of-service via oversized requestshttps://agentprime.io/advisories/CVE-2026-97701/https://agentprime.io/advisories/CVE-2026-97701/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 19:09:47 GMTCVECVE-2026-122054: BIG-HKSCS decoding hang on crafted inputhttps://agentprime.io/advisories/CVE-2026-122054/https://agentprime.io/advisories/CVE-2026-122054/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 17:17:38 GMTCVECVE-2026-106554: jackson-dataformat-cbor: quadratic-time TagList growth on unbounded stacked tags (CPU/GC DoS, PoC)https://agentprime.io/advisories/CVE-2026-106554/https://agentprime.io/advisories/CVE-2026-106554/Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 16:14:05 GMTCVECVE-2026-121960: FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequesthttps://agentprime.io/advisories/CVE-2026-121960/https://agentprime.io/advisories/CVE-2026-121960/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 15:33:23 GMTCVECVE-2026-121959: FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Framehttps://agentprime.io/advisories/CVE-2026-121959/https://agentprime.io/advisories/CVE-2026-121959/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 15:33:23 GMTCVECVE-2026-121951: FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Eventhttps://agentprime.io/advisories/CVE-2026-121951/https://agentprime.io/advisories/CVE-2026-121951/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 15:33:17 GMTCVEUnbounded query cache growth from interpolated JSON paths and splice lists in Ectohttps://agentprime.io/advisories/GHSA-cxjx-vmm2-qr8r/https://agentprime.io/advisories/GHSA-cxjx-vmm2-qr8r/ecto >=3.4.0, <3.14.3, fixed in 3.14.3. CVSS 8.9 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 04 Nov 2026 13:57:29 GMTHexectoCVE-2026-121944: sngrep through 1.9.0 Infinite Loop DoS via Crafted NFLOG TLVhttps://agentprime.io/advisories/CVE-2026-121944/https://agentprime.io/advisories/CVE-2026-121944/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 12:31:21 GMTCVECVE-2026-100302: Apache ZooKeeper: Denial of service through unbounded memory allocation in multiRead request handlinghttps://agentprime.io/advisories/CVE-2026-100302/https://agentprime.io/advisories/CVE-2026-100302/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 10:46:20 GMTCVECVE-2026-115448: Apache ZooKeeper: Unbounded recursion in snapshot serialization allows a client to render the server unrecoverablehttps://agentprime.io/advisories/CVE-2026-115448/https://agentprime.io/advisories/CVE-2026-115448/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 10:45:43 GMTCVECVE-2026-103582: Apache ActiveMQ NMS OpenWire Client Library: Unbounded/Unvalidated Length Fields in Apache.NMS.OpenWire Unmarshalling (DoS)https://agentprime.io/advisories/CVE-2026-103582/https://agentprime.io/advisories/CVE-2026-103582/Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 10:16:45 GMTCVECVE-2026-108949: Apache ActiveMQ, ActiveMQ Broker: Repeated rejected temporary destination consumer requests can lead to broker OOMhttps://agentprime.io/advisories/CVE-2026-108949/https://agentprime.io/advisories/CVE-2026-108949/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 10:09:31 GMTCVECVE-2026-114426: Pre-authentication upload parsing permits resource exhaustionhttps://agentprime.io/advisories/CVE-2026-114426/https://agentprime.io/advisories/CVE-2026-114426/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 08:33:13 GMTCVECVE-2026-62126: WordPress SAML SP Single Sign On plugin <= 6.1.0 - Denial of Service Attack vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62126/https://agentprime.io/advisories/CVE-2026-62126/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 08:00:16 GMTCVECVE-2026-110944: Resource exhaustion vulnerability in HTTP request handling impacts Qt HTTP Server (QHttpServer)https://agentprime.io/advisories/CVE-2026-110944/https://agentprime.io/advisories/CVE-2026-110944/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 07:04:07 GMTCVECVE-2026-87044: Memory leak in the Mbed TLS crypto shim on failed cipher/AEAD operations leads to remotely triggered crypto denial of servicehttps://agentprime.io/advisories/CVE-2026-87044/https://agentprime.io/advisories/CVE-2026-87044/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 06:09:09 GMTCVECVE-2026-120651: CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE_UPLOADS is sethttps://agentprime.io/advisories/CVE-2026-120651/https://agentprime.io/advisories/CVE-2026-120651/Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:41:17 GMTCVECVE-2026-120650: CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limitshttps://agentprime.io/advisories/CVE-2026-120650/https://agentprime.io/advisories/CVE-2026-120650/Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:41:14 GMTCVE