Lucene search
+L

12 matches found

osv_cleanstart
osv_cleanstart
•added 2026/10/23 12:37 a.m.•8 views

CLEANSTART-2026-GV77140 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API

Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API...

6.5CVSS5.9AI score0.0041EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/13 4:17 p.m.•17 views

CVE-2026-96297

Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage is combined with a batch size of 0, the server may read from memory that is no longer in use. Because that memory ca...

6.5CVSS0.00241EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/10/13 4:17 p.m.•10 views

CVE-2026-96297

Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage is combined with a batch size of 0, the server may read from memory that is no longer in use. Because that memory ca...

6.5CVSS5.9AI score0.00241EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/13 3:23 p.m.•10 views

EUVD-2026-98811

Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage is combined with a batch size of 0, the server may read from memory that is no longer in use. Because that memory ca...

6.5CVSS5.9AI score0.00241EPSS
SaveExploits0References1
MongoDB
MongoDB
•added 2026/10/13 3:23 p.m.•15 views

MongoDB Server may disclose process memory via a crafted `$_internalApplyOplogUpdate` aggregation pipeline

Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage is combined with a batch size of 0, the server may read from memory that is no longer in use. Because that memory ca...

6.5CVSS5.9AI score0.00241EPSS
SaveExploits0References1Affected Software1
osv_bit
osv_bit
•added 2026/10/13 6:47 a.m.•24 views

BIT-ELASTICSEARCH-2026-103006 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch contains an uncontrolled recursion weakness in its search aggregation processing. An authenticated use...

6.5CVSS6AI score0.0041EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•14 views

PT-2026-111668

🚨 CVE-2026-96297 Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage is combined with a batch size of 0, the server may read from memory that is no longer in use. Becau...

6.5CVSS5.9AI score0.00241EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•10 views

PT-2026-111337

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch contains an uncontrolled recursion weakness in its search aggregation processing. An authenticated use...

6.5CVSS6AI score0.0041EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•16 views

CVE-2026-96297: Use After Free

Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage is combined with a batch size of 0, the server may read from memory that is no longer in use. Because that memory ca...

6.5CVSS5.9AI score0.00241EPSS
SaveExploits0References2
osv_azl
osv_azl
•added 2026/10/06 8:17 p.m.•29 views

AZL-106724 CVE-2026-103006 affecting package rubygem-elasticsearch 8.9.0-1

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch contains an uncontrolled recursion weakness in its search aggregation processing. An authenticated use...

6.5CVSS6AI score0.0041EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 8:17 p.m.•12 views

CVE-2026-103006

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch contains an uncontrolled recursion weakness in its search aggregation processing. An authenticated use...

6.5CVSS0.0041EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•10 views

CVE-2026-103006: Uncontrolled Recursion

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch contains an uncontrolled recursion weakness in its search aggregation processing. An authenticated use...

6.5CVSS6AI score0.0041EPSS
SaveExploits0References3
Rows per page
Query Builder