CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

283 matches found

OSV•added 2026/08/13 7:13 p.m.•13 views

CVE-2026-72663 Inefficient Algorithmic Complexity in Kibana Leading to Denial of Service

Inefficient Algorithmic Complexity CWE-407 in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. A specially crafted, deeply nested expression submitted to a Kibana TSVB visualization is evaluated with a worst-case cost that grows disproportionately with the size of the...

6.5CVSS5.5AI score

SaveExploits0References3

Elastic•added 2026/08/13 10:39 a.m.•15 views

Kibana 8.19.20, 9.3.5, 9.4.2 Security Update (ESA-2026-136)

Uncaught Exception in Kibana Cases Leading to Denial of Service Uncaught Exception CWE-248 in Kibana Cases can lead to denial of service via Input Data Manipulation CAPEC-153. Malformed link syntax stored in a case comment was not rejected or sanitized when the comment was later formatted for...

4.3CVSS5.5AI score0.00288EPSS

SaveExploits0

Positive Technologies•added 2026/08/13 12:00 a.m.•18 views

PT-2026-71750

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An uncaught exception in Kibana Cases allows for a denial of service through input data manipulation. This occurs because malformed link syntax stored in a case comment is not rejected or...

4.3CVSS5.6AI score0.00288EPSS

SaveExploits0References14

Rapid7 Vulnerability Database (full)•added 2026/08/13 12:00 a.m.•7 views

CVE-2026-49096: Uncaught Exception

Uncaught Exception CWE-248 in Kibana Cases can lead to denial of service via Input Data Manipulation CAPEC-153. Malformed link syntax stored in a case comment was not rejected or sanitized when the comment was later formatted for display, and the resulting unhandled error prevented the affected...

4.3CVSS5.7AI score0.00288EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2026/08/13 12:00 a.m.•5 views

CVE-2026-72638: Uncontrolled Recursion

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that i...

6.5CVSS5.9AI score0.0042EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2026/08/13 12:00 a.m.•4 views

CVE-2026-72663: Inefficient Algorithmic Complexity

6.5CVSS5.9AI score0.0042EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2026/08/13 12:00 a.m.•4 views

CVE-2026-72660: Uncaught Exception

Uncaught Exception CWE-248, resulting from Improper Input Validation CWE-20, in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged access can cause an internal error condition in Kibana by supplying specially crafted data...

6.5CVSS6AI score0.00522EPSS

SaveExploits0References3

Tenable Nessus•added 2026/08/13 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-19518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation. CVE-2026-19518 Note that Nessus...

6.5CVSS5.9AI score0.00355EPSS

SaveExploits0References3

OSV•added 2026/08/11 7:17 a.m.•13 views

DEBIAN-CVE-2026-19518