Lucene search
+L

1477 matches found

Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•7 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003171 advisory. The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service host OS...

5.5CVSS6.5AI score0.00553EPSS
SaveExploits0References29
Positive Technologies
Positive Technologies
•added 2026/01/15 12:00 a.m.•29 views

PT-2026-3128

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX Series versions prior to 22.4R3-S8 Juniper Networks Junos OS on SRX Series versions 23.2 before 23.2R2-S5 Juniper Networks Junos OS on SRX Series versions 23.4 before 23.4R2-S6 Juniper Networks Junos OS on SRX...

8.7CVSS6.5AI score0.00319EPSS
SaveExploits0References5
Wired Threat Level
Wired Threat Level
•added 2026/01/14 6:54 p.m.•24 views

Verizon Outage Knocks Out US Mobile Service, Including Some 911 Calls

A major Verizon outage appeared to impact customers across the United States starting around noon ET on Wednesday. Calls to Verizon customers from other carriers may also be impacted...

7AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/01/14 12:00 a.m.•18 views

AmbShield: Enhancing Physical Layer Security with Ambient Backscatter Devices against Eavesdroppers

Passive eavesdropping compromises confidentiality in wireless networks, especially in resource-constrained environments where heavyweight cryptography is impractical. Physical layer security PLS exploits channel randomness and spatial selectivity to confine information to an intended receiver wit...

6.6AI score
SaveExploits0
NVD
NVD
•added 2026/01/13 9:15 p.m.•20 views

CVE-2026-0543

Improper Input Validation CWE-20 in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation CAPEC-130 through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector...

6.5CVSS0.00431EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/13 9:15 p.m.•22 views

CVE-2026-0530

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana Fleet can lead to Excessive Allocation CAPEC-130 via a specially crafted request. This causes the application to perform redundant processing operations that continuously consume system resources until service degradation or...

6.5CVSS0.00325EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/01/13 9:10 p.m.•12 views

CVE-2026-0543 Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation

Improper Input Validation CWE-20 in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation CAPEC-130 through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector...

6.5CVSS6.1AI score
SaveExploits0References3
CVE
CVE
•added 2026/01/13 9:10 p.m.•81 views

CVE-2026-0543

CVE-2026-0543 describes an Improper Input Validation (Kibana's Email Connector) that enables an Excessive Allocation (CAPEC-130). An attacker with view-level privileges for connector actions can craft email parameters to trigger device/service disruption, causing complete unavailability until man...

6.5CVSS6.2AI score0.00431EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/13 9:10 p.m.•12 views

CVE-2026-0543 Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation

Improper Input Validation CWE-20 in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation CAPEC-130 through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector...

6.5CVSS6.2AI score0.00431EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/13 9:10 p.m.•19 views

EUVD-2026-2035

Improper Input Validation CWE-20 in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation CAPEC-130 through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector...

6.5CVSS6.2AI score0.00431EPSS
SaveExploits0References2
Elastic
Elastic
•added 2026/01/13 8:47 p.m.•36 views

Kibana 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-08)

Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation ESA-2026-08 Improper Input Validation CWE-20 in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation CAPEC-130 through a specially crafted email address parameter. This requires an...

6.5CVSS6AI score0.00431EPSS
SaveExploits0
osv_cve
osv_cve
•added 2026/01/13 11:53 a.m.•19 views

CVE-2025-59022 TYPO3 CMS Allows Broken Access Control in Recycler Module

Backend users who had access to the recycler module could delete arbitrary data from any database table defined in the TCA - regardless of whether they had permission to that particular table. This allowed attackers to purge and destroy critical site data, effectively rendering the website...

7.1CVSS6AI score
SaveExploits0References8
CNNVD
CNNVD
•added 2026/01/13 12:00 a.m.•19 views

Elastic Kibana Fleet 安全漏洞

Elastic Kibana Fleet is a component of Elastic Netherlands that centralizes the management and monitoring of Elastic Agent. A security vulnerability exists in Elastic Kibana Fleet that stems from an unlimited or infinite stream of resource allocations, which could lead to over-allocation via ad-h...

6.5CVSS5.9AI score0.00325EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•14 views

PT-2026-2635

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description A flaw exists in Kibana's Email Connector due to improper input validation. An attacker with authenticated access and sufficient view-level privileges can trigger an excessive allocation of...

6.5CVSS5.7AI score0.00431EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
•added 2026/01/09 11:54 a.m.•13 views

CVE-2009-4008

Unbound before 1.4.4 does not send responses for signed zones after mishandling an unspecified query, which allows remote attackers to cause a denial of service DNSSEC outage via a crafted query...

5CVSS5.9AI score0.02701EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:57 a.m.•20 views

CVE-2023-4883

Invalid pointer release vulnerability. Exploitation of this vulnerability could allow an attacker to interrupt the correct operation of the service by sending a specially crafted json string to the VNF Virtual Network Function, and triggering the ogssbimessagefree function, which could cause a...

7.5CVSS7.1AI score0.00616EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/01/09 12:00 a.m.•28 views

Fast_wireless_conf Component DoS

The vulnerability of the Fastwirelessconf component in the microprogramming software for UTT Jinqi 750W routers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

9CVSS7.3AI score0.01004EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2026/01/08 12:00 a.m.•50 views

CVE-2025-65518

Plesk Obsidian versions 8.0.1 through 18.0.73 are vulnerable to a Denial of Service (DoS) condition. The flaw exists in the get_password.php endpoint, where improper handling of malicious payloads allows a crafted request to cause the web interface to reload continuously. An unauthenticated remot...

7.5CVSS5.9AI score0.00612EPSS
SaveExploits0References5Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:29 a.m.•23 views

CVE-2019-16100

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-side HTTP traffic from a single source...

7.5CVSS7.3AI score0.01811EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2026/01/07 12:00 a.m.•13 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000210)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000210 advisory. A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS...

7.5CVSS6.8AI score0.02704EPSS
SaveExploits0References4
Rows per page
Query Builder