CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
GNOME json-glib Infinite Loop Denial of Service Vulnerability (CVE-2026-120194) Technical Advisory
[Affected Scope] Applications and systems utilizing the GNOME json-glib library to evaluate user-controlled JSONPath queries via json_path_query()
[Impact] An attacker can trigger an infinite loop by supplying a JSONPath slice expression with a negative step, leading to 100% CPU utilization and a complete Denial of Service (DoS)
[Mitigation] Upgrade the json-glib package to the latest patched version, or implement input validation to reject JSONPath expressions containing negative slice steps
Cisco ASA and FTD Management & VPN Web Servers Remote Denial of Service Vulnerability (CVE-2024-20353) Security Advisory
[Affected Scope] Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software with management or VPN web server enabled.
[Impact] An unauthenticated, remote attacker can trigger an unexpected device reload by sending a crafted HTTP request, leading to a complete Denial of Service (DoS) condition.
[Mitigation] Apply official Cisco software patches immediately. Restrict access to management interfaces and monitor VPN ports for anomalous HTTP headers as temporary workarounds.