Lucene search
+L

492 matches found

Cvelist
Cvelist
•added 2026/09/29 4:40 p.m.•39 views

CVE-2026-100242 DataTransfer depends on phpspreadsheet version vulnerable to CVE-2026-59933 (XLS/OLE memory exhaustion)

Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Excessive Allocation. This issue affects Mediawiki - DataTransfer Extension: from 1.46.0 before 1.47.0...

0.00339EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/29 4:40 p.m.•15 views

CVE-2026-100242

The Mediawiki - DataTransfer Extension (versions 1.46.0 before 1.47.0 ) is vulnerable to a Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption (CWE-1395, CWE-400). The issue stems from a dependency on a phpspreadsheet version susceptible to CVE-2026-59933 , which ...

7.5CVSS5.9AI score0.00339EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/29 12:37 a.m.•7 views

CLEANSTART-2026-MI40861 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130)

Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130...

9.8CVSS6.7AI score0.00472EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/29 12:37 a.m.•10 views

CLEANSTART-2026-HO72909 Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130)

Security vulnerability affects the sonarqube package. Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130...

9.8CVSS5.8AI score0.005EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/29 12:00 a.m.•5 views

PT-2026-102676

Name of the Vulnerable Software and Affected Versions Mediawiki - DataTransfer Extension versions 1.46.0 through 1.46.x Description The Mediawiki - DataTransfer Extension contains a dependency on a vulnerable third-party component that leads to uncontrolled resource consumption, specifically...

7.5CVSS5.8AI score0.00339EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•9 views

CVE-2026-100242: Dependency on Vulnerable Third-Party Component

Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Excessive Allocation. This issue affects Mediawiki - DataTransfer Extension: from 1.46.0 before 1.47.0...

7.5CVSS5.9AI score0.00339EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/26 10:18 p.m.•10 views

Allocation of Resources Without Limits or Throttling

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via excessive allocation in the allocation. An attacker can exhaust system...

8.7CVSS5.8AI score0.0042EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/26 10:18 p.m.•13 views

Allocation of Resources Without Limits or Throttling

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via excessive allocation. An attacker can exhaust system resources by sending...

8.7CVSS5.8AI score0.0042EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/26 10:18 p.m.•11 views

Allocation of Resources Without Limits or Throttling

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via excessive allocation. An attacker can exhaust system resources by sending...

8.7CVSS5.8AI score0.0042EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/26 10:18 p.m.•10 views

Allocation of Resources Without Limits or Throttling

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via excessive allocation. An attacker can exhaust system resources by sending...

8.7CVSS5.8AI score0.0042EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/26 10:18 p.m.•8 views

Allocation of Resources Without Limits or Throttling

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via excessive allocation. An attacker can exhaust system resources by sending...

8.7CVSS5.8AI score0.0042EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/26 10:18 p.m.•11 views

Allocation of Resources Without Limits or Throttling

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via excessive allocation. An attacker can exhaust system resources by sending...

8.7CVSS5.8AI score0.0042EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/26 10:18 p.m.•10 views

Allocation of Resources Without Limits or Throttling

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via excessive allocation. An attacker can exhaust system resources by sending...

8.7CVSS5.8AI score0.0044EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/26 9:16 p.m.•22 views

CVE-2026-94397

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

6.5CVSS0.0042EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/26 9:16 p.m.•20 views

CVE-2026-94399

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

6.5CVSS0.0042EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/26 9:16 p.m.•15 views

CVE-2026-94400

Uncontrolled Resource Consumption CWE-400 in Kibana can lead denial of service via Excessive Allocation CAPEC-130...

6.5CVSS0.0042EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/26 9:16 p.m.•21 views

CVE-2026-94398

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

6.5CVSS0.0042EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/26 9:16 p.m.•22 views

CVE-2026-94396

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

6.5CVSS0.0042EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/26 9:16 p.m.•15 views

AZL-104954 CVE-2026-94399 affecting package rubygem-elasticsearch 8.9.0-1

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

6.5CVSS5.8AI score0.0042EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/26 9:16 p.m.•10 views

AZL-104942 CVE-2026-94408 affecting package rubygem-elasticsearch 8.9.0-1

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

4.9CVSS5.8AI score0.0044EPSS
SaveExploits0References1
Rows per page
Query Builder