Lucene search
+L

13767 matches found

NVD
NVD
•added 2026/07/01 5:16 p.m.•40 views

CVE-2026-56149

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS0.005EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/07/01 5:16 p.m.•21 views

CVE-2026-56149

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS6.1AI score0.005EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/01 5:16 p.m.•18 views

UBUNTU-CVE-2026-56149

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS5.8AI score0.005EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/01 4:21 p.m.•216 views

CVE-2026-56149

CVE-2026-56149 affects Elasticsearch and stems from Allocation of Resources Without Limits or Throttling (CWE-770), enabling a denial of service via Excessive memory allocation when a user with privileges to manage trained models submits a crafted machine learning request. Affected versions inclu...

4.9CVSS5.7AI score0.005EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/07/01 4:21 p.m.•53 views

CVE-2026-56149 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS0.005EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/01 4:21 p.m.•56 views

CVE-2026-56149

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS5.8AI score0.005EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/07/01 4:21 p.m.•27 views

EUVD-2026-41072

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS5.8AI score0.005EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/01 4:21 p.m.•13 views

CVE-2026-56149 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS5.7AI score0.005EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/01 4:21 p.m.•14 views

CVE-2026-56149 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS5.9AI score
SaveExploits0References3
NVD
NVD
•added 2026/07/01 2:16 p.m.•23 views

CVE-2026-53345

In the Linux kernel, the following vulnerability has been resolved: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying When marking a page dirty, complain about not having a running/loaded vCPU if and only if the VM is still alive, i.e. its refcount is non-zero. This will...

5.5CVSS0.0012EPSS
SaveExploits0References5
Elastic
Elastic
•added 2026/07/01 1:51 p.m.•24 views

Elasticsearch 8.19.17, 9.3.6, 9.4.3 Security Update (ESA-2026-43)

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a special...

4.9CVSS5.7AI score0.005EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/07/01 1:32 p.m.•71 views

CVE-2026-53345 KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying

In the Linux kernel, the following vulnerability has been resolved: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying When marking a page dirty, complain about not having a running/loaded vCPU if and only if the VM is still alive, i.e. its refcount is non-zero. This will...

0.0012EPSS
SaveExploits0References5
CVE
CVE
•added 2026/07/01 1:32 p.m.•78 views

CVE-2026-53345

CVE-2026-53345 affects the Linux kernel KVM implementation. The issue arises when marking a guest page dirty: a warning is emitted about not having a running vCPU unless the VM’s refcount is non-zero, which could leak memory for SEV-ES guests. Connected advisories show Debian/Ubuntu/RootOS patche...

5.5CVSS5.5AI score0.0012EPSS
SaveExploits0References5Affected Software1
attackerkb
attackerkb
•added 2026/07/01 1:32 p.m.•13 views

CVE-2026-53345

In the Linux kernel, the following vulnerability has been resolved: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying When marking a page dirty, complain about not having a running/loaded vCPU if and only if the VM is still alive, i.e. its refcount is non-zero. This will...

5.5AI score0.0012EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
•added 2026/07/01 1:32 p.m.•28 views

EUVD-2026-40979

In the Linux kernel, the following vulnerability has been resolved: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying When marking a page dirty, complain about not having a running/loaded vCPU if and only if the VM is still alive, i.e. its refcount is non-zero. This will...

5.5AI score0.0012EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/07/01 1:32 p.m.•20 views

CVE-2026-53345

In the Linux kernel, the following vulnerability has been resolved: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying When marking a page dirty, complain about not having a running/loaded vCPU if and only if the VM is still alive, i.e. its refcount is non-zero. This will...

5.5CVSS5.6AI score0.0012EPSS
SaveExploits0
OSV
OSV
•added 2026/07/01 1:32 p.m.•16 views

CVE-2026-53345 KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying

In the Linux kernel, the following vulnerability has been resolved: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying When marking a page dirty, complain about not having a running/loaded vCPU if and only if the VM is still alive, i.e. its refcount is non-zero. This will...

5.8AI score
SaveExploits0References8
GithubExploit
GithubExploit
•added 2026/07/01 11:07 a.m.•83 views

Know_Your_Customer_Adverse_Media_Check_BFSI_POC

CITADEL-Governed ADIB AMC Starter PoC This repository is a VM...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/01 12:00 a.m.•20 views

PT-2026-54864

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description An issue exists where the allocation of resources lacks limits or throttling. A user with elevated privileges can submit a specially crafted machine learning request that triggers...

6.1CVSS5.6AI score0.005EPSS
SaveExploits0References15
Packet Storm News
Packet Storm News
•added 2026/07/01 12:00 a.m.•28 views

Forensic-Oriented Intrusion Detection Using Synthetic Network Traffic Data and Explainable Artificial Intelligence

Digital forensic investigations of network intrusions require analytical outputs that are traceable, reproducible, and court-defensible - requirements existing machine learning pipelines do not satisfy, since they treat original evidence as training data and produce opaque classifications without...

6AI score
SaveExploits0
Rows per page
Query Builder