63738 matches found
CVE-2026-94398 Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...
CVE-2026-94398 Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...
EUVD-2026-87797
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...
CVE-2026-82300
Elasticsearch is susceptible to Uncontrolled Resource Consumption (CWE-400) which can result in a denial of service due to Excessive Allocation (CAPEC-130). The vulnerability affects all versions from 8.0.0 up to and including 8.19.21 , and versions 9.0.0 through 9.4.7 and 9.5.0 through 9.5.3 . I...
CVE-2026-82300 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...
CVE-2026-82300 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...
EUVD-2026-87796
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...
CVE-2026-82294
A Uncontrolled Resource Consumption (CWE-400) vulnerability in Elasticsearch can lead to a Denial of Service via Excessive Allocation (CAPEC-130). The issue affects all configurations with analytical aggregation search capabilities enabled. Specifically, it impacts versions 8.0.0 through 8.19.20 ...
CVE-2026-82294 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...
CVE-2026-82294 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...
EUVD-2026-87795
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...
Allocation of Resources Without Limits or Throttling
Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via loadfile in vllm/multimodal/media/audio.py, where the VLLMMAXAUDIOCLIPFILESIZEMB file size...
CVE-2026-100650
A flaw was found in vLLM. The system fully downloads and decodes remote or embedded media files before enforcing configured size and quantity restrictions. A remote attacker can exploit this vulnerability by submitting requests containing excessively large or numerous media payloads, forcing the...
CVE-2026-100662
Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled resource consumption vulnerability in the QPACK encoder-stream instruction decoder QpackEncoderHandler, installed on the peer-initiated unidirectional QPACK encoder stream, type 0x02...
CVE-2026-100649
vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allocation where sampler subclass shadowing allows independent counter increments. Unauthenticated attackers can select different sampler subclasses in video requests to exceed configured decoder limits an...
CVE-2026-100662
Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled resource consumption vulnerability in the QPACK encoder-stream instruction decoder QpackEncoderHandler, installed on the peer-initiated unidirectional QPACK encoder stream, type 0x02...
EUVD-2026-87756
Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled resource consumption vulnerability in the QPACK encoder-stream instruction decoder QpackEncoderHandler, installed on the peer-initiated unidirectional QPACK encoder stream, type 0x02...
CVE-2026-100662
Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled resource consumption vulnerability in the QPACK encoder-stream instruction decoder QpackEncoderHandler, installed on the peer-initiated unidirectional QPACK encoder stream, type 0x02...
CVE-2026-100662
Netty's HTTP/3 codec (io.netty:netty-codec-http3 ) versions 4.2.0.Final through 4.2.17.Final are vulnerable to an uncontrolled resource consumption flaw in the QpackEncoderHandler (QPACK encoder-stream instruction decoder). The handler fails to enforce limits on the Name Length and Value Length f...
