Lucene search
+L

198 matches found

NVD
NVD
added 2026/09/01 8:17 p.m.1 views

CVE-2026-72652

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted request that causes excessive resource consumption, which may render Kibana unavailable...

6.5CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 8:17 p.m.1 views

CVE-2026-56143

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...

4.9CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 8:17 p.m.2 views

CVE-2026-33465

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user with low-level permissions could submit a specially crafted request that causes excessive resource consumption, which may render Kibana...

6.5CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/01 7:20 p.m.6 views

CVE-2026-72628 Improper Handling of Highly Compressed Data in Kibana Leading to Denial of Service

Improper Handling of Highly Compressed Data CWE-409 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user holding Streams management privileges could supply specially crafted content that expands to a far larger volume of data during processing,...

6.5CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/01 7:20 p.m.3 views

CVE-2026-72628

Kibana (by Elastic) is affected by a Denial of Service vulnerability (CWE-409) caused by improper handling of highly compressed data. An authenticated user with Streams management privileges can supply crafted content that expands to a much larger data volume during processing, exhausting memory ...

6.5CVSS5.9AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/01 7:20 p.m.6 views

CVE-2026-72652 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted request that causes excessive resource consumption, which may render Kibana unavailable...

6.5CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/01 7:20 p.m.4 views

CVE-2026-72652

CVE-2026-72652 is a denial of service vulnerability in Kibana caused by allocation of resources without limits or throttling (CWE-770) , triggered via Excessive Allocation (CAPEC-130) . An authenticated user can submit a specially crafted request that causes excessive resource consumption, potent...

6.5CVSS5.9AI score
SaveExploits0References1
CVE
CVE
added 2026/09/01 7:20 p.m.5 views

CVE-2026-56143

CVE-2026-56143 is a Denial of Service vulnerability in Elasticsearch caused by Allocation of Resources Without Limits or Throttling (CWE-770) . An attacker with elevated privileges can submit a specially crafted request that triggers excessive memory allocation (CAPEC-130) , potentially rendering...

4.9CVSS5.9AI score
SaveExploits0References1
CVE
CVE
added 2026/09/01 7:20 p.m.5 views

CVE-2026-33465

CVE-2026-33465 affects Kibana and involves a resource allocation without limits or throttling flaw (CWE-770). An authenticated user with low-level permissions can submit a specially crafted request that triggers excessive resource consumption, potentially rendering Kibana unavailable (denial of s...

6.5CVSS5.9AI score
SaveExploits0References1
OSV
OSV
added 2026/08/31 7:40 p.m.5 views

MGASA-2026-0348 Updated clamav packages fix security vulnerabilities

An indexing error while converting GPT partition names that could read or write beyond a stack-allocated partition entry. CVE-2026-20345 An integer overflow in the PESpin unpacker that could allocate an undersized buffer and then write beyond it while rebuilding a PE file. CVE-2026-20339 An integ...

7.5CVSS6.1AI score0.00462EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/28 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-80179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed...

5.9CVSS5.9AI score0.00251EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/21 12:00 a.m.17 views

Kibana 8.x < 8.19.20 / 9.x < 9.4.5 Multiple Vulnerabilities (ESA-2026-92 / ESA-2026-98 / ESA-2026-100 / ESA-2026-104 / ESA-2026-105 / ESA-2026-106 / ESA-2026-110)

The version of Kibana installed on the remote host is 8.x prior to 8.19.20, or 9.x prior to 9.4.5. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-92, ESA-2026-98, ESA-2026-100, ESA-2026-104, ESA-2026-105, ESA-2026-106 and ESA-2026-110 advisories. - Missing...

7.1CVSS5.7AI score0.0029EPSS
SaveExploits0References14
EUVD
EUVD
added 2026/08/13 7:13 p.m.9 views

EUVD-2026-58277

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated user who is authorized to manage maintenance windows could submit a specially crafted, malformed payload that causes the Kibana process to...

6.5CVSS5.3AI score0.0029EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/13 7:13 p.m.41 views

CVE-2026-72651

CVE-2026-72651 : In Kibana, Allocation of Resources Without Limits or Throttling (CWE-770) can cause a Denial of Service through Excessive Allocation. An authenticated user with read‑only privileges to the alerting feature can send a malformed payload that exhausts Kibana resources, rendering the...

6.5CVSS5.3AI score0.0029EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/13 7:11 p.m.42 views

CVE-2026-72674 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. A user-supplied list of document fields accepted by the Kibana Playground for RAG feature was neither bounded in length nor de-duplicated before it was used t...

6.5CVSS0.0029EPSS
SaveExploits0References1
Elastic
Elastic
added 2026/08/13 10:47 a.m.10 views

Kibana 8.19.20, 9.4.5 Security Update (ESA-2026-137)

Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to denial of service via Excessive Allocation CAPEC-130. A query expression accepted by a connector reporting operation was...

6.5CVSS5.3AI score0.00325EPSS
SaveExploits0
NVD
NVD
added 2026/08/12 3:16 a.m.14 views

CVE-2026-19587

Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation...

6.5CVSS0.00199EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/12 3:16 a.m.4 views

DEBIAN-CVE-2026-19587

Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation...

6.5CVSS5.2AI score0.00199EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/12 3:16 a.m.11 views

UBUNTU-CVE-2026-19587

Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation...

6.5CVSS5.2AI score0.00199EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/12 2:14 a.m.43 views

CVE-2026-19587

CVE-2026-19587 concerns the Samsung Open Source rlottie library, with an Uncontrolled Resource Consumption vulnerability that enables excessive allocation. Affected component: rlottie (Open Source). Root cause: uncontrolled allocation leading to high resource usage; no explicit version range or a...

6.5CVSS5.2AI score0.00199EPSS
SaveExploits0References1
Rows per page
Query Builder