CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

638 matches found

OSV•added 2025/12/20 11:39 a.m.•3 views

BIT-KIBANA-2025-68389 Kibana Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can allow a low-privileged authenticated user to cause Excessive Allocation CAPEC-130 of computing resources and a denial of service DoS of the Kibana process via a crafted HTTP request...

6.5CVSS6.4AI score0.00271EPSS

Exploits0References2

Positive Technologies•added 2025/12/18 12:0 a.m.•5 views

PT-2025-52369

6.5CVSS6.6AI score0.00271EPSS

Exploits0References3

CVE•added 2025/11/13 4:18 p.m.•17 views

CVE-2025-20341

The CVE-2025-20341 case involves Cisco Catalyst Center Virtual Appliance. Description and multiple connected sources confirm an Access Control / input-validation flaw that allows an authenticated, remote attacker with at least Observer privileges to escalate to Administrator by sending a crafted ...

8.8CVSS6.3AI score0.00515EPSS

Exploits0References1

Positive Technologies•added 2025/11/13 12:0 a.m.•5 views

PT-2025-46852

Name of the Vulnerable Software and Affected Versions Cisco Catalyst Center Virtual Appliance affected versions not specified Description A flaw exists in Cisco Catalyst Center Virtual Appliance that could allow a remote attacker with valid credentials for a user account with at least the role of...

8.8CVSS6.5AI score0.00515EPSS

Exploits0References14

Cvelist•added 2025/10/22 12:0 a.m.•6 views

CVE-2025-60336

A NULL pointer dereference in the sub41773C function of TOTOLINK N600R v4.3.0cu.7866B20220506 allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

0.01654EPSS

Exploits1References1