335022 matches found
CVE-2026-73489 vulnerabilities
Vulnerabilities for packages: yazi...
CVE-2026-64192 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp...
GHSA-HF6X-8P5F-CGMF vulnerabilities
Vulnerabilities for packages: cassandra-reaper, airbyte-platform-fips, geoserver, pinot-fips, floci-az, pinot, jbang, apicurio-registry-fips, logstash, akhq, airbyte-platform, reposilite, traccar-fips, elasticsearch-fips, nacos-docker, apache-hop-fips, apicurio-registry, conductor-fips,...
CVE-2026-72684
A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input. Processing that input causes a specific internal component to allocate memory without any upper bound, and the allocation occurs outside the...
CVE-2026-72687
A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the...
CVE-2026-72678
Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memory for an internal data structure. An authenticated user holding only read privileges can submit a single small crafted request to a product API endpoint that causes the node to...
CVE-2026-72674
Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. A user-supplied list of document fields accepted by the Kibana Playground for RAG feature was neither bounded in length nor de-duplicated before it was used t...
CVE-2026-72656
Memory Allocation with Excessive Size Value CWE-789 in the ES|QL query processing of Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated user able to submit ES|QL queries could send a specially crafted query whose evaluation allocates an unbounded amou...
CVE-2026-72639
Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the allocation derived from that count is not accounted against any circuit breaker. An authenticated user holding only read privileges on a single searchable index can submit one...
CVE-2026-72645
Memory Allocation with Excessive Size Value CWE-789 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated user holding only read privileges on a single index can submit one small, specially crafted search request that causes an excessively large memor...
CVE-2026-16868
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of uninitialized memory during ASN.1 length processing...
CVE-2026-17550
creationtimestamp| type| source ---|---|--- 2026-08-13 20:15:10+00:00| seen| https://www.ncsc.nl/alerts/meerdere-kwetsbaarheden-in-autodesk-autocad...
CVE-2026-16463
creationtimestamp| type| source ---|---|--- 2026-08-13 20:15:05+00:00| seen| https://www.ncsc.nl/alerts/meerdere-kwetsbaarheden-in-autodesk-autocad...
EUVD-2026-58374
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of uninitialized memory during ASN.1 length processing...
CVE-2026-16868
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of uninitialized memory during ASN.1 length processing...
CVE-2026-16868 IBM i is Affected By Multiple Vulnerabilities in NetServer
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of uninitialized memory during ASN.1 length processing...
CVE-2026-16868 IBM i is Affected By Multiple Vulnerabilities in NetServer
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of uninitialized memory during ASN.1 length processing...
CVE-2026-16868
The CVE-2026-16868 issue affects IBM i on versions 7.3–7.6, where a denial of service can be triggered remotely by a flaw in ASN.1 length processing due to uninitialized memory in NetServer. Affected products: IBM i 7.3, 7.4, 7.5, 7.6. The IBM bulletin (NetServer vulnerabilities) lists the condit...
