Lucene search
+L

11870 matches found

osv_alsa
osv_alsa
•added 2026/09/28 12:00 a.m.•16 views

ALSA-2026:72484 Important: ruby:4.0 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses CVE-2026-80212 For more details...

7.5CVSS5.8AI score0.00401EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•10 views

CVE-2026-102278: Uncontrolled Resource Consumption

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before...

7.5CVSS6.1AI score0.0035EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•4 views

PT-2026-102377

Name of the Vulnerable Software and Affected Versions brace-expansion versions prior to 1.1.20 brace-expansion versions prior to 2.1.6 brace-expansion versions prior to 3.0.8 brace-expansion versions prior to 5.0.11 Description Deeply nested brace groups supplied as an untrusted pattern can cause...

7.5CVSS5.8AI score0.0035EPSS
SaveExploits0References43
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•15 views

Netty DefaultHttp2Connection DefaultEndpoint DoS

The vulnerability of the DefaultHttp2Connection.DefaultEndpoint component in the framework for developing network applications, servers, and client protocols using Netty is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service...

5.3CVSS8.2AI score0.00507EPSS
SaveExploits0References11Affected Software15
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•14 views

Netty DelegatingDecompressorFrameListener Buffer Overflow DoS

The vulnerability of the DelegingDecompressorFrameListener class in the framework for developing network applications, servers, and clients using the Netty protocol is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service...

7.8CVSS8.3AI score0.00882EPSS
SaveExploits0References25Affected Software12
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•13 views

pyasn1 Uncontrolled Resource Consumption DoS

The vulnerability of the pyasn1 library in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS7.7AI score0.00616EPSS
SaveExploits0References13Affected Software16
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•15 views

pyasn1 Uncontrolled Resource Consumption DoS

The vulnerability of the pyasn1 library in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS7.7AI score0.00616EPSS
SaveExploits0References12Affected Software16
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•18 views

RedisArrayAggregator DoS

The vulnerability of the RedisArrayAggregator component in the networking application development framework, used for servers and client protocols based on Netty, involves an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruption...

7.8CVSS6.4AI score0.00849EPSS
SaveExploits0References17Affected Software5
RedhatCVE
RedhatCVE
•added 2026/09/27 12:14 p.m.•14 views

CVE-2026-75758

A flaw was found in the Elixir standard library. An attacker who controls a list can trigger an uncontrolled recursion vulnerability by passing a specially crafted list to functions like inspect/1, List.tostring/1, or List.tocharlist/1. This leads to the exhaustion of a BEAM node's memory,...

6.2CVSS5.7AI score0.0018EPSS
SaveExploits0References10
osv_azl
osv_azl
•added 2026/09/26 9:16 p.m.•20 views

AZL-104945 CVE-2026-94397 affecting package rubygem-elasticsearch 8.9.0-1

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

6.5CVSS5.8AI score0.0042EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/26 9:16 p.m.•17 views

CVE-2026-94400

Uncontrolled Resource Consumption CWE-400 in Kibana can lead denial of service via Excessive Allocation CAPEC-130...

6.5CVSS0.0042EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/09/26 9:16 p.m.•20 views

AZL-104954 CVE-2026-94399 affecting package rubygem-elasticsearch 8.9.0-1

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

6.5CVSS5.8AI score0.0042EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/26 9:16 p.m.•27 views

CVE-2026-94396

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

6.5CVSS0.0042EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/26 9:16 p.m.•28 views

CVE-2026-94399

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

6.5CVSS0.0042EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/26 9:16 p.m.•17 views

CVE-2026-94408

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

4.9CVSS0.0044EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/09/26 9:16 p.m.•17 views

AZL-104951 CVE-2026-82300 affecting package rubygem-elasticsearch 8.9.0-1

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...

6.5CVSS5.8AI score0.0042EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/26 8:42 p.m.•16 views

CVE-2026-94408 Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

4.9CVSS5.8AI score0.0044EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/26 8:42 p.m.•131 views

CVE-2026-94408

The Elasticsearch search engine is vulnerable to Uncontrolled Resource Consumption (CWE-400) which can lead to a denial of service through Excessive Allocation (CAPEC-130). The vulnerability affects all configurations. Affected Versions: 8.x : 8.0.0 up to and including 8.19.21 9.x : 9.0.0 up to a...

4.9CVSS5.8AI score0.0044EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/09/26 8:42 p.m.•45 views

CVE-2026-94408 Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

4.9CVSS0.0044EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/26 8:42 p.m.•20 views

EUVD-2026-87802

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

4.9CVSS5.8AI score0.0044EPSS
SaveExploits0References1
Rows per page
Query Builder