Lucene search
+L

11785 matches found

Debian CVE
Debian CVE
•added 2026/10/06 6:41 p.m.•12 views

CVE-2026-106186

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

8.6CVSS6.7AI score0.00153EPSS
SaveExploits0
CVE
CVE
•added 2026/10/06 6:41 p.m.•127 views

CVE-2026-106186

Google Chrome on Windows versions prior to 155.0.8059.39 is affected by an uncontrolled search path element in the CredentialProvider component. This vulnerability (CWE-427) allows a local attacker to potentially execute arbitrary code outside the sandbox via a local program. While the Chromium s...

8.6CVSS6.7AI score0.00153EPSS
SaveExploits0References2Affected Software1
Elastic
Elastic
•added 2026/10/06 6:41 p.m.•21 views

Elasticsearch 9.4.8, 9.5.5 Security Update (ESA-2026-190)

Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion CWE-674 in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service, via Excessive Allocation CAPEC-130. Affected Versions: 9.x:...

6.5CVSS5.7AI score0.00309EPSS
SaveExploits0
Elastic
Elastic
•added 2026/10/06 6:34 p.m.•16 views

Elasticsearch 8.19.23, 9.4.8, 9.5.5 Security Update (ESA-2026-185)

Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. A low-privileged authenticated user can submit a specially crafted query that causes...

6.5CVSS5.8AI score0.00309EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2026/10/06 6:27 p.m.•11 views

Security Bulletin: Multiple vulnerabilities within WebSphere Application Server Liberty, affect IBM Tivoli Monitoring.

Summary Multiple vulnerabilities within KCCI WebSphere Liberty Server which is included as part of IBM Tivoli Monitoring ITM portal server have been addressed. Vulnerability Details CVEID:CVE-2026-15057 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerabl...

7.5CVSS6.2AI score0.00533EPSS
SaveExploits0Affected Software1
osv_cleanstart
osv_cleanstart
•added 2026/10/06 12:39 a.m.•15 views

CLEANSTART-2026-EL31068 Uncontrolled Resource Consumption vulnerability in the HTTP/1

Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption vulnerability in the HTTP/1...

7.5CVSS5.4AI score0.0087EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/06 12:39 a.m.•13 views

CLEANSTART-2026-IB65674 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230)

Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads CAPEC-230...

6.5CVSS5.8AI score0.0042EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/06 12:39 a.m.•11 views

CLEANSTART-2026-ZW02426 Uncontrolled Recursion (CWE-674) in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation (CAPEC-130)

Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation CAPEC-130...

6.5CVSS5.8AI score0.00418EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/06 12:39 a.m.•13 views

CLEANSTART-2026-YK51895 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130)

Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...

6.5CVSS5.8AI score0.0042EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/06 12:39 a.m.•8 views

CLEANSTART-2026-TB71295 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130)

Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130...

6.5CVSS6.5AI score0.00472EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/06 12:39 a.m.•10 views

CLEANSTART-2026-GG06012 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user

Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user...

6.5CVSS5.8AI score0.0042EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/06 12:39 a.m.•13 views

CLEANSTART-2026-JM55948 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197)

Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Exponential Data Expansion CAPEC-197...

6.5CVSS5.8AI score0.00472EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/06 12:39 a.m.•14 views

CLEANSTART-2026-PP64708 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153)

Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153...

6.5CVSS5.8AI score0.0042EPSS
SaveExploits0References3
Redos
Redos
•added 2026/10/06 12:00 a.m.•14 views

ROS-20261006-73-0040

The vulnerability of the apparmor component in the Linux operating system’s kernel is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00177EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•17 views

PT-2026-107155

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Resource Consumption in the query processing engine allows a low-privileged authenticated user to submit a specially crafted query. This action causes uncontrolled memory...

6.5CVSS5.7AI score0.00309EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•11 views

CVE-2026-105854: Uncontrolled Resource Consumption

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a malformed multipart request body can cause multipart Content-Type processing to take an extremely long time, resulting in uncontrolled resource...

8.7CVSS5.8AI score0.00354EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•17 views

Elasticsearch 9.0.x < 9.4.6 / 9.5.x < 9.5.2 DoS (ESA-2026-196)

The version of Elasticsearch installed on the remote host is 9.0.x prior to 9.4.6, or 9.5.x prior to 9.5.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-196 advisory. - Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially...

6.5CVSS6AI score0.0041EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•18 views

Elasticsearch 9.0.x < 9.4.8 / 9.5.x < 9.5.5 DoS (ESA-2026-198)

The version of Elasticsearch installed on the remote host is 9.0.x prior to 9.4.8, or 9.5.x prior to 9.5.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-198 advisory. - Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially...

6.5CVSS5.9AI score0.00309EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•9 views

CVE-2026-102409: Uncontrolled Recursion

Uncontrolled Recursion CWE-674 in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service, via Excessive Allocation CAPEC-130...

6.5CVSS5.8AI score0.00309EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•21 views

PT-2026-107159

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Recursion in Elasticsearch allows an authenticated user with low privileges to terminate a node, leading to a denial of service. This occurs through Excessive Allocation,...

6.5CVSS5.8AI score0.00309EPSS
SaveExploits0References5
Rows per page
Query Builder