Lucene search
+L

12254 matches found

osv_ubuntu
osv_ubuntu
•added 2026/05/13 8:16 p.m.•22 views

UBUNTU-CVE-2026-28379

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS6.7AI score0.00262EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/05/13 8:16 p.m.•26 views

UBUNTU-CVE-2026-28376

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/05/13 8:16 p.m.•23 views

CVE-2026-28376

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/05/13 7:28 p.m.•20 views

CVE-2026-28376 Grafana Live push endpoint allows unbounded memory allocation leading to OOM

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue...

6.5CVSS6.5AI score0.00328EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/05/13 7:28 p.m.•18 views

CVE-2026-28376

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
•added 2026/05/13 7:28 p.m.•81 views

CVE-2026-28376

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/13 7:28 p.m.•16 views

CVE-2026-28376 Grafana Live push endpoint allows unbounded memory allocation leading to OOM

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/13 7:28 p.m.•75 views

CVE-2026-28376

CVE-2026-28376 affects the Grafana Live push endpoint. An authenticated user with access to the Grafana Live API can trigger unbounded memory allocation by sending a large or streaming request body, potentially causing out-of-memory conditions. The available documents describe the vulnerable comp...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/05/13 7:28 p.m.•60 views

CVE-2026-28376 Grafana Live push endpoint allows unbounded memory allocation leading to OOM

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue...

6.5CVSS0.00328EPSS
SaveExploits0References1
Mend
Mend
•added 2026/05/13 7:28 p.m.•6 views

CVE-2026-28376

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue...

7.1CVSS6.6AI score0.00328EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/05/13 7:28 p.m.•63 views

CVE-2026-28379

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS6.7AI score0.00262EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
•added 2026/05/13 7:28 p.m.•36 views

CVE-2026-28379

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS6.7AI score0.00262EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/13 7:28 p.m.•105 views

CVE-2026-28379 Viewer-triggered race condition in Grafana Live leads to complete server crash

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS0.00262EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/13 7:28 p.m.•77 views

CVE-2026-28379

Grafana Live contains a race condition that can be triggered by authenticated users with the Viewer role. Concurrent requests lead to a fatal map access error, causing complete Grafana server unavailability and requiring a restart. Public details are limited to the description; no explicit exploi...

6.5CVSS6.7AI score0.00262EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2026/05/13 7:28 p.m.•14 views

CVE-2026-28379 Viewer-triggered race condition in Grafana Live leads to complete server crash

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS5.8AI score
SaveExploits0References3
Snyk
Snyk
•added 2026/05/13 7:28 p.m.•17 views

Use of a Non-reentrant Function in a Concurrent Context

Overview Affected versions of this package are vulnerable to Use of a Non-reentrant Function in a Concurrent Context via a race condition in the Grafana Live process. An attacker can cause the server to crash and become unavailable by sending concurrent requests as an authenticated user with View...

7.1CVSS6.5AI score0.00262EPSS
SaveExploits0References2
Mend
Mend
•added 2026/05/13 7:28 p.m.•4 views

CVE-2026-28379

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

7.1CVSS6.7AI score0.00262EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/05/13 7:28 p.m.•16 views

CVE-2026-28379 Viewer-triggered race condition in Grafana Live leads to complete server crash

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS6.7AI score0.00262EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/13 3:08 p.m.•62 views

CVE-2026-43489

The CVE-2026-43489 issue concerns the Linux kernel liveupdate code path for LUO files, specifically luo_file.retrieve_status. The bug arises because on a failed retrieve, luo_retrieve_file() returns an error without recording that a retrieve was attempted or its error code. This can cause an erro...

5.5CVSS6AI score0.00143EPSS
SaveExploits0References2Affected Software1
The Hacker News
The Hacker News
•added 2026/05/13 11:52 a.m.•34 views

[Webinar] How Modern Attack Paths Cross Code, Pipelines, and Cloud

TL;DR: Stop chasing thousands of "toast" alerts. Join experts from Wiz to learn how hackers connect tiny flaws to build a "Lethal Chain" to your data—and how to break it. Register for the Strategic Briefing Here. Most security tools work like a smoke alarm that goes off every time you burn a piec...

6AI score
SaveExploits0
Rows per page
Query Builder