Lucene search
+L

3 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•3 views

CVE-2026-0531: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana Fleet can lead to Excessive Allocation CAPEC-130 via a specially crafted bulk retrieval request. This requires an attacker to have low-level privileges equivalent to the viewer role, which grants read access to agent policies...

6.5CVSS5.8AI score0.00488EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/10/25 12:00 a.m.•15 views

PT-2023-26629 · Unknown · Tire-Sales Line

Name of the Vulnerable Software and Affected Versions: tire-sales Line version 13.6.1 Description: An issue in the software allows a remote attacker to obtain sensitive information via a crafted GET request. Recommendations: For version 13.6.1, consider restricting access to sensitive information...

7.5CVSS6.8AI score0.00726EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2022/09/08 12:00 a.m.•22 views

PT-2022-18728 · Cynet · Cynet 360 Web Portal

Name of the Vulnerable Software and Affected Versions: Cynet 360 Web Portal versions prior to 4.5 Description: The issue allows attackers to access a list of monitored files and profiles via a crafted GET request sent to "/WebApp/SettingsFileMonitor/GetFileMonitorProfiles". Recommendations: For...

5.3CVSS5.3AI score0.0071EPSS
SaveExploits1References6
Rows per page
Query Builder