Lucene search
+L

10 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-82073

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks...

7.1CVSS5.8AI score0.00328EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/08 5:18 p.m.•10 views

CVE-2026-82073

A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...

7.1CVSS0.00328EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/08 4:12 p.m.•11 views

EUVD-2026-72916

A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...

7.1CVSS5.8AI score0.00328EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/08 4:12 p.m.•15 views

CVE-2026-82073 Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Search

A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...

7.1CVSS5.9AI score0.00328EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•20 views

PT-2026-87165

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description A security issue in the aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks. This occurs when Atlas Search feature...

7.1CVSS5.8AI score0.00328EPSS
SaveExploits0References8
OSV
OSV
•added 2026/01/16 8:42 a.m.•21 views

BIT-KIBANA-2026-0543 Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation

Improper Input Validation CWE-20 in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation CAPEC-130 through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector...

6.5CVSS6.2AI score0.00421EPSS
SaveExploits0References2
OSV
OSV
•added 2026/01/16 8:39 a.m.•23 views

BIT-ELK-2026-0543 Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation

Improper Input Validation CWE-20 in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation CAPEC-130 through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector...

6.5CVSS6.2AI score0.00421EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/16 8:38 a.m.•21 views

CVE-2026-0543

A flaw was found in Kibana's Email Connector. An authenticated attacker with view-level privileges can exploit this vulnerability by providing a specially crafted email address parameter. This improper input validation can lead to an excessive allocation of resources, resulting in a complete deni...

6.5CVSS5.8AI score0.00421EPSS
SaveExploits0References4
NVD
NVD
•added 2026/01/13 9:15 p.m.•14 views

CVE-2026-0543

Improper Input Validation CWE-20 in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation CAPEC-130 through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector...

6.5CVSS0.00421EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•2 views

CVE-2026-0543: Improper Input Validation

Improper Input Validation CWE-20 in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation CAPEC-130 through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector...

6.5CVSS6.1AI score0.00421EPSS
SaveExploits0References1
Rows per page
Query Builder