Lucene search
+L

9 matches found

osv_cleanstart
osv_cleanstart
•added 2026/10/06 12:39 a.m.•6 views

CLEANSTART-2026-ZB19187 flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier

Security vulnerability affects the sonarqube package. A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier...

6.5CVSS5.7AI score0.0042EPSS
SaveExploits0References3
osv_bit
osv_bit
•added 2026/08/19 8:39 a.m.•19 views

BIT-ELASTICSEARCH-2026-72687 Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the...

6.5CVSS5.7AI score0.0042EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/19 12:00 a.m.•4 views

PT-2026-79871

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the...

6.5CVSS5.7AI score0.0042EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/13 7:11 p.m.•21 views

EUVD-2026-58251

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the...

6.5CVSS5.7AI score0.0042EPSS
SaveExploits0References1
Mend
Mend
•added 2026/08/13 7:11 p.m.•10 views

CVE-2026-72687

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the...

7.1CVSS5.7AI score0.0042EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/08/13 7:11 p.m.•8 views

CVE-2026-72687 Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the...

6.5CVSS5.8AI score
SaveExploits0References3
attackerkb
attackerkb
•added 2026/08/13 7:11 p.m.•30 views

CVE-2026-72687

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the...

6.5CVSS5.7AI score0.0042EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/08/13 7:11 p.m.•54 views

CVE-2026-72687 Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the...

6.5CVSS0.0042EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•3 views

CVE-2026-72687: Memory Allocation with Excessive Size Value

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the...

6.5CVSS5.7AI score0.0042EPSS
SaveExploits0References3
Rows per page
Query Builder