Lucene search
+L

3186 matches found

Snyk
Snyk
•added 2026/01/14 10:49 a.m.•7 views

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the MongoDB protocol parser. An attacker can cause buffer overflows by sending specially crafted network traffic to a monitored network interface where MongoDB protocol parsing is enabled...

7.1CVSS7AI score0.00221EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/01/14 10:49 a.m.•9 views

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the MongoDB protocol parser. An attacker can cause buffer overflows by sending specially crafted network traffic to a monitored network interface where MongoDB protocol parsing is enabled...

7.1CVSS7AI score0.00221EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/14 10:16 a.m.•30 views

CVE-2026-0529

Improper Validation of Array Index CWE-129 in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buffers CAPEC-100 through specially crafted network traffic. This requires an attacker to send a malformed payload to a monitored network interface where MongoDB protocol...

6.5CVSS0.00221EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/14 10:09 a.m.•46 views

CVE-2026-0529 Improper Validation of Array Index in Packetbeat Leading to Overflow Buffers

Improper Validation of Array Index CWE-129 in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buffers CAPEC-100 through specially crafted network traffic. This requires an attacker to send a malformed payload to a monitored network interface where MongoDB protocol...

6.5CVSS0.00221EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/14 10:09 a.m.•76 views

CVE-2026-0529

CVE-2026-0529 affects Elastic Beats Packetbeat MongoDB protocol parser. Affected software: Elastic Beats (Packetbeat) versions 7.x, 8.x before 8.19.10, and 9.x before 9.1.10 or 9.2.4. Root cause: Improper validation of array index (CWE-129) in the MongoDB protocol parser, which can permit buffer ...

6.5CVSS6.7AI score0.00221EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/14 10:09 a.m.•10 views

CVE-2026-0529

Improper Validation of Array Index CWE-129 in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buffers CAPEC-100 through specially crafted network traffic. This requires an attacker to send a malformed payload to a monitored network interface where MongoDB protocol...

6.5CVSS5.6AI score0.00221EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/14 10:09 a.m.•7 views

CVE-2026-0529 Improper Validation of Array Index in Packetbeat Leading to Overflow Buffers

Improper Validation of Array Index CWE-129 in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buffers CAPEC-100 through specially crafted network traffic. This requires an attacker to send a malformed payload to a monitored network interface where MongoDB protocol...

6.5CVSS6.7AI score0.00221EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/01/14 12:25 a.m.•11 views

SUSE CVE-2025-71086

In the Linux kernel, the following vulnerability has been resolved: net: rose: fix invalid array index in rosekillbydevice rosekillbydevice collects sockets into a local array and then iterates over them to disconnect sockets bound to a device being brought down. The loop mistakenly indexes...

4.4CVSS6.4AI score0.00141EPSS
SaveExploits0References20
CNNVD
CNNVD
•added 2026/01/14 12:00 a.m.•13 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly initializing the number of elements before accessing an array, which could result in an...

7.8CVSS6.5AI score0.0014EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/14 12:00 a.m.•4 views

CVE-2026-0529: Improper Validation of Array Index

Improper Validation of Array Index CWE-129 in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buffers CAPEC-100 through specially crafted network traffic. This requires an attacker to send a malformed payload to a monitored network interface where MongoDB protocol...

6.5CVSS6.7AI score0.00221EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/14 12:00 a.m.•3 views

CVE-2025-71143: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: Assign .num before accessing .hws Commit f316cdff8d67 "clk: Annotate struct clkhwonecelldata with countedby" annotated the hws member of 'struct clkhwonecelldata' with countedby, which informs the...

7.8CVSS6.1AI score0.0014EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/14 12:00 a.m.•33 views

PT-2026-2848

Name of the Vulnerable Software and Affected Versions Packetbeat affected versions not specified Description A flaw exists in Packetbeat’s MongoDB protocol parser related to improper validation of array index, which could allow for buffer overflows when processing specially crafted network traffi...

6.5CVSS6.7AI score0.00221EPSS
SaveExploits0References8
Snyk
Snyk
•added 2026/01/13 9:31 p.m.•7 views

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index in the Graphite or Zookeeper server metricsets and the Prometheus helper module. An attacker can cause a service disruption by sending specially crafted, malformed payloads or metric data. Remediation...

7.5CVSS7.8AI score0.00416EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/01/13 9:31 p.m.•23 views

Metricbeat affected by multiple denial of service vulnerabilities

Improper Validation of Array Index CWE-129 exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation CAPEC-153 via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input...

7.5CVSS7.9AI score0.00416EPSS
SaveExploits0References6Affected Software1
Snyk
Snyk
•added 2026/01/13 9:31 p.m.•10 views

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index in the Graphite or Zookeeper server metricsets and the Prometheus helper module. An attacker can cause a service disruption by sending specially crafted, malformed payloads or metric data. Remediation...

7.5CVSS7.8AI score0.00416EPSS
SaveExploits0References2
OSV
OSV
•added 2026/01/13 9:31 p.m.•18 views

GHSA-W2GR-585J-R428 Metricbeat affected by multiple denial of service vulnerabilities

Improper Validation of Array Index CWE-129 exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation CAPEC-153 via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input...

6.5CVSS7.9AI score0.00416EPSS
SaveExploits0References6
NVD
NVD
•added 2026/01/13 9:15 p.m.•34 views

CVE-2026-0528

Improper Validation of Array Index CWE-129 exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation CAPEC-153 via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input...

7.5CVSS0.00416EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/13 9:02 p.m.•28 views

EUVD-2026-2032

Improper Validation of Array Index CWE-129 exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation CAPEC-153 via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input...

6.5CVSS7.9AI score0.00416EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/01/13 9:02 p.m.•8 views

CVE-2026-0528 Improper Input Validation in Metricbeat Leading to Denial of Service

Improper Validation of Array Index CWE-129 exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation CAPEC-153 via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input...

6.5CVSS7.9AI score0.00416EPSS
SaveExploits0References1
Elastic
Elastic
•added 2026/01/13 8:43 p.m.•24 views

Packetbeat 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-02)

Improper Validation of Array Index in Packetbeat Leading to Overflow Buffers ESA-2026-02 Improper Validation of Array Index CWE-129 in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buffers CAPEC-100 through specially crafted network traffic. This requires an attacke...

6.5CVSS6.9AI score0.00221EPSS
SaveExploits0
Rows per page
Query Builder