10115 matches found
Allocation of Resources Without Limits or Throttling
Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the allocation. An attacker can exhaust system memory and render the...
EUVD-2026-69613
Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...
CVE-2026-73749 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...
AZL-98448 CVE-2026-56143 affecting package rubygem-elasticsearch 8.9.0-1
Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...
CVE-2026-56143
Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...
CVE-2026-56143 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...
EUVD-2026-69558
Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...
CVE-2026-56143 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...
CVE-2026-9634 Redundancy Module Configuration Tool - Multiple Vulnerabilities
A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard non-administrator users due to incorrect default permissions. If a loca...
PT-2026-84381
Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description An issue exists where resources are allocated without limits or throttling. A user with elevated privileges can submit a specially crafted request that triggers excessive memory...
CVE-2026-82649 SiYuan before 3.8.1 Local Privilege Escalation via Uncontrolled Search Path
SiYuan Windows installer before version 3.8.1 affected versions = 2.0.14 contains an uncontrolled search path element vulnerability in its NSIS installer, which invokes system executables such as TASKKILL by name rather than by absolute path. Because NSIS nsExec::Exec resolves these calls using a...
CVE-2026-17203
IBM Application Runtime Expert (ARE) for IBM i version V1R1M0 is vulnerable to improper authentication enforcement (CWE-287), allowing a remote authenticated attacker to obtain sensitive information. The CVSS 3.1 score is 7.5 (HIGH) with the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, in...
CVE-2026-18527: Session Fixation
IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert ARE for i could allow a remote attacker to gain elevated privileges, caused by ARE GUI component processing. An unauthenticated attacker can exploit this vulnerability to execute actions under another user's authenticate...
CVE-2026-78037: Improper Neutralization of Special Elements used in an OS Command
Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device...
CVE-2026-16821: Use of Externally-Controlled Format String
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format string vulnerability...
CVE-2026-78037 Xiiaozet LK100W OS Command Injection
Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device...
CVE-2026-57910
Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges...
CVE-2026-57910 WatchGuard Agent improper authentication allows unauthenticated remote code execution
Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges...
CVE-2026-57910 WatchGuard Agent improper authentication allows unauthenticated remote code execution
Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges...