Lucene search
+L

8 matches found

OSV
OSV
•added 2026/10/06 12:39 a.m.•5 views

CLEANSTART-2026-ZB19187 flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier

Security vulnerability affects the sonarqube package. A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier...

6.5CVSS5.8AI score0.0042EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/19 8:39 a.m.•12 views

BIT-ELASTICSEARCH-2026-72687 Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the...

6.5CVSS5.8AI score0.0042EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/19 12:00 a.m.•3 views

PT-2026-79871

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the...

6.5CVSS5.8AI score0.0042EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/08/13 7:11 p.m.•28 views

CVE-2026-72687

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the...

6.5CVSS5.8AI score0.0042EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/08/13 7:11 p.m.•16 views

EUVD-2026-58251

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the...

6.5CVSS5.8AI score0.0042EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/13 7:11 p.m.•48 views

CVE-2026-72687 Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the...

6.5CVSS0.0042EPSS
SaveExploits0References1
OSV
OSV
•added 2026/08/13 7:11 p.m.•8 views

CVE-2026-72687 Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the...

6.5CVSS5.8AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•3 views

CVE-2026-72687: Memory Allocation with Excessive Size Value

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the...

6.5CVSS5.8AI score0.0042EPSS
SaveExploits0References3
Rows per page
Query Builder