CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

112 matches found

OSV•added 2026/05/22 2:8 a.m.•4 views

GO-2026-5016 Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection's internal state and released for...

6.5CVSS5.8AI score0.00023EPSS

Exploits0References3

NVD•added 2026/05/13 8:16 p.m.•5 views

CVE-2026-33378

Using the $timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server...

6.5CVSS0.00016EPSS

Exploits0References1

Vulnrichment•added 2026/05/13 7:28 p.m.•5 views

CVE-2026-33378 Grafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro

6.5CVSS5.8AI score0.00016EPSS

Exploits0References1

Cvelist•added 2026/05/13 7:28 p.m.•24 views

CVE-2026-33378 Grafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro

6.5CVSS0.00016EPSS

Exploits0References1

CNNVD•added 2026/05/13 12:0 a.m.•4 views

Grafana OSS 安全漏洞

Grafana OSS is an open-source visualization dashboard developed by Grafana. There is a security vulnerability in Grafana OSS, which arises from using the timeGroup macro, potentially leading to server overload and OOM issues...

6.5CVSS5.8AI score0.00016EPSS

Exploits0References1

OSV•added 2026/02/19 8:29 p.m.•0 views

GHSA-33HQ-FVWR-56PM devalue affected by CPU and memory amplification from sparse arrays

Under certain circumstances, serializing sparse arrays using uneval or stringify could cause CPU and/or memory exhaustion. When this occurs on the server, it results in a DoS. This is extremely difficult to take advantage of in practice, as an attacker would have to manage to create a sparse arra...

6.3CVSS5.9AI score

Exploits0References4

Vulnrichment•added 2026/01/15 3:52 p.m.•0 views

CVE-2021-47752 AWebServer GhostBuilding 18 - Denial of Service (DoS)

AWebServer GhostBuilding 18 contains a denial of service vulnerability that allows remote attackers to overwhelm the server by sending multiple concurrent HTTP requests. Attackers can generate high-volume requests to multiple endpoints including /mysqladmin to potentially crash or render the...

8.7CVSS6.9AI score0.0044EPSS

Exploits1References3

RedHat Linux•added 2025/11/12 3:26 p.m.•3 views

python-kdcproxy: Remote DoS via unbounded TCP upstream buffering

If an attacker causes kdcproxy to connect to an attacker-controlled KDC server e.g. through server-side request forgery, they can exploit the fact that kdcproxy does not enforce bounds on TCP response length to conduct a denial-of-service attack. While receiving the KDC's response, kdcproxy copie...

5.9CVSS5.9AI score0.00075EPSS

Exploits0References6