CVE-2026-115715

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to denial of service via a specially crafted input value that is processed by an affected phonetic encoder of the analysis-phonetic plugin. An authenticated user with permission to write documents to or run...

EUVD-2026-116080

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to denial of service via a specially crafted input value that is processed by an affected phonetic encoder of the analysis-phonetic plugin. An authenticated user with permission to write documents to or run...

CVE-2026-115715 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to denial of service via a specially crafted input value that is processed by an affected phonetic encoder of the analysis-phonetic plugin. An authenticated user with permission to write documents to or run...

CVE-2026-115715

Elasticsearch versions 8.0.0 through 8.19.23 , 9.0.0 through 9.4.8 , and 9.5.0 through 9.5.5 are vulnerable to a Denial of Service (DoS) via CWE-770 (Allocation of Resources Without Limits or Throttling). The flaw exists in the analysis-phonetic plugin when using the koelnerphonetik or haasephone...

Elasticsearch 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-235)

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to denial of service via a specially crafted input value that is processed by an affected phonetic encoder of t...

Papers

This repository is intended to host my research papers. Put it on watch if you would like to read more from me. Bypassing XSS Detection Mechanisms Download PDF A Phonetic Approach to Calculate Linguistic Information in Text Download PDF...

[SECURITY] Fedora 42 Update: fcitx5-chewing-5.1.9-1.fc42

fcitx5-chewing is a Chewing Wrapper for Fcitx. Chewing is a set of free intelligent Chinese Phonetic IME...

Linux kernel Phonetic DoS

The vulnerability of the Linux operating system’s kernel’s phonetic component is related to the operation of the operation outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

com.floragunn:search-guard-ssl (5.0.0-alpha3-10a), org.elasticsearch.plugin:analysis-icu (5.0.0-alpha3) +22 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (5.0.0-alpha3)

org.elasticsearch:elasticsearch MAVEN version 5.0.0-alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.floragunn:search-guard-ssl 5.0.0-alpha3-10a - org.elasticsearch.plugin:analysis-icu...

com.floragunn:search-guard-2 (5.0.0-alpha4-2a), com.floragunn:search-guard-ssl (5.0.0-alpha4-13a) +25 more potentially affected by CVE-2023-49921 via org.elasticsearch:elasticsearch (5.0.0-alpha4)

org.elasticsearch:elasticsearch MAVEN version 5.0.0-alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.floragunn:search-guard-2 5.0.0-alpha4-2a - com.floragunn:search-guard-ssl...

Fedora: Security Advisory for apache-commons-codec (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: apache-commons-codec-1.16.0-7.fc40

Commons Codec is an attempt to provide definitive implementations of commonly used encoders and decoders. Examples include Base64, Hex, Phonetic and URLs...

[SECURITY] Fedora 37 Update: librime-1.7.3-3.fc37

Rime Input Method Engine Library Support for shape-based and phonetic-based input methods, including those for Chinese dialects. A selected dictionary in Traditional Chinese, powered by opencc for Simplified Chinese output...

[SECURITY] Fedora 36 Update: librime-1.7.3-2.fc36

Rime Input Method Engine Library Support for shape-based and phonetic-based input methods, including those for Chinese dialects. A selected dictionary in Traditional Chinese, powered by opencc for Simplified Chinese output...

com.floragunn:search-guard-ssl (5.0.0-alpha3-10a), org.elasticsearch.plugin:analysis-icu (5.0.0-alpha3) +22 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (5.0.0-alpha3)

org.elasticsearch:elasticsearch MAVEN version 5.0.0-alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.floragunn:search-guard-ssl 5.0.0-alpha3-10a - org.elasticsearch.plugin:analysis-icu...

com.floragunn:search-guard-ssl (5.0.0-alpha3-10a), org.elasticsearch.plugin:analysis-icu (5.0.0-alpha3) +22 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (5.0.0-alpha3)

org.elasticsearch:elasticsearch MAVEN version 5.0.0-alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.floragunn:search-guard-ssl 5.0.0-alpha3-10a - org.elasticsearch.plugin:analysis-icu...

co.diji:elasticsearch-mocksolrplugin (1.1.2), com.sonian:elasticsearch-jetty (0.19.4) +1 more potentially affected by CVE-2018-3824 via org.elasticsearch:elasticsearch (0.19.2)

org.elasticsearch:elasticsearch MAVEN version 0.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - co.diji:elasticsearch-mocksolrplugin 1.1.2 - com.sonian:elasticsearch-jetty 0.19.4 -...

co.diji:elasticsearch-mocksolrplugin (1.1.2), com.sonian:elasticsearch-jetty (0.19.4) +1 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (0.19.2)

org.elasticsearch:elasticsearch MAVEN version 0.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - co.diji:elasticsearch-mocksolrplugin 1.1.2 - com.sonian:elasticsearch-jetty 0.19.4 -...

co.diji:elasticsearch-mocksolrplugin (1.1.2), com.sonian:elasticsearch-jetty (0.19.4) +1 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (0.19.2)

org.elasticsearch:elasticsearch MAVEN version 0.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - co.diji:elasticsearch-mocksolrplugin 1.1.2 - com.sonian:elasticsearch-jetty 0.19.4 -...

Software-Security-Learning

It is an offensive tool for binary exploitation. The primary CVE ID is not explicitly mentioned, but the repository contains information on various software security topics, including binary exploitation. The target product/service or framework is not specified, but the repository includes tools...