Lucene search
+L

614183 matches found

Ivanti
Ivanti
added 2026/09/06 5:17 p.m.30 views

CVE‑2026‑49975 – HTTP/2 Denial of Service Vulnerability

Status: EPMM unaffected Summary: CVE‑2026‑49975 is a denial‑of‑service DoS vulnerability affecting HTTP/2 implementations in several web servers. The issue allows an unauthenticated attacker to exhaust server memory using specially crafted HTTP/2 requests. EPMM / Sentry rely on Apache Tomcat for...

7.5CVSS5.5AI score0.11471EPSS
Exploits8
CVE
CVE
added 45 minutes ago3 views

CVE-2026-56145

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. A low-privileged authenticated user with permission to execute EQL sequence queries against an index they control can send a specially crafted query that triggers excessive...

6.5CVSS5.5AI score
Exploits0References1
Cvelist
Cvelist
added 45 minutes ago4 views

CVE-2026-56145 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. A low-privileged authenticated user with permission to execute EQL sequence queries against an index they control can send a specially crafted query that triggers excessive...

6.5CVSS
Exploits0References1
CVE
CVE
added 1 hour ago6 views

CVE-2026-42397

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted request to affected Entity Analytics endpoints containing an oversized input value that causes excessive...

6.5CVSS5.3AI score
Exploits0References1
Cvelist
Cvelist
added 1 hour ago5 views

CVE-2026-42397 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted request to affected Entity Analytics endpoints containing an oversized input value that causes excessive...

6.5CVSS
Exploits0References1
CVE
CVE
added 1 hour ago9 views

CVE-2026-15957

Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom service implementations. Uncontrolled recursion in the JSON, CBOR, and XML deserializer functions emitted by Amazon smithy-...

8.7CVSS5.6AI score
Exploits0References3
Cvelist
Cvelist
added 1 hour ago9 views

CVE-2026-15957 Uncontrolled recursion in smithy-rs generated JSON, CBOR, and XML deserializers allows unauthenticated remote denial of service via recursive shapes

Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom service implementations. Uncontrolled recursion in the JSON, CBOR, and XML deserializer functions emitted by Amazon smithy-...

8.7CVSS
Exploits0References3
Elastic
Elastic
added 1 hour ago7 views

Kibana 9.3.7, 9.4.4 Security Update (ESA-2026-55)

Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted request to...

6.5CVSS5.5AI score
Exploits0
CVE
CVE
added 1 hour ago9 views

CVE-2026-46600

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

5.4AI score
Exploits0References3
Cvelist
Cvelist
added 1 hour ago10 views

CVE-2026-46600 Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

Exploits0References3
EUVD
EUVD
added 2 hours ago4 views

EUVD-2026-46327

This High severity DoS Denial of Service vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to cause a resource...

7.1CVSS5.4AI score
Exploits0References3
EUVD
EUVD
added 2 hours ago4 views

EUVD-2026-46280

Home Assistant Core before 2026.5.4 contains a cross-site scripting vulnerability in the Shelly integration's asyncgetmediaimage method that allows attackers controlling a Shelly device's thumb field to serve arbitrary HTML content by supplying a data URI with a text/html content type without...

4.7CVSS5.2AI score
Exploits0References5
EUVD
EUVD
added 2 hours ago3 views

EUVD-2026-46358

An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database...

9.6CVSS5.6AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 3 hours ago5 views

CVE-2026-64018

A flaw was found in the Linux kernel's mana network driver. In Confidential Virtual Machines VMs, a missing bounds check when processing network events can allow a malicious hardware component or a compromised VM to write data outside of an intended memory region. This out-of-bounds access could...

9.3CVSS5.3AI score0.00172EPSS
Exploits0References4
NVD
NVD
added 3 hours ago4 views

CVE-2026-44907

A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack versions 19.0.0...

7.5CVSS
Exploits0References1
RedhatCVE
RedhatCVE
added 3 hours ago4 views

CVE-2026-63988

A flaw was found in the Linux kernel's bridge module. A local user, by interacting with the sysfs path for bridge port attributes, could trigger a 'sleep in atomic context' issue. This occurs because the brportstore function, while holding a lock that requires an atomic context, calls a function...

5.5CVSS5.4AI score0.00166EPSS
Exploits0References4
Cvelist
Cvelist
added 3 hours ago7 views

CVE-2026-21577

This High severity DoS Denial of Service vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to cause a resource...

7.1CVSS
Exploits0References2
CVE
CVE
added 3 hours ago5 views

CVE-2026-21577

This CVE affects Confluence Data Center, introduced in versions 9.0.1–10.2.0. It is a High severity DoS (CVSS 7.1) that an authenticated attacker can use to make a resource unavailable by disrupting network-connected services. Upgrades are recommended: move to Confluence Data Center 9.2.17 or new...

7.1CVSS5.4AI score
Exploits0References2
RedhatCVE
RedhatCVE
added 3 hours ago3 views

CVE-2026-63877

A flaw was found in the Linux kernel's serial DZ driver. During the initialization of the first serial port, a null pointer dereference occurs because a pointer to the port's parent device is incorrectly derived from a null value. This vulnerability can lead to a system crash, resulting in a Deni...

5.5CVSS5.4AI score0.00209EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 4 hours ago4 views

CVE-2026-63992

A flaw was found in the Linux kernel's tunnels module. This vulnerability occurs when the iptunnelpmtudcheckicmp function is called without the skb transport header being properly set. An attacker could exploit this condition to trigger an out-of-bound memory access, which may lead to system...

9.1CVSS5.3AI score0.00176EPSS
Exploits0References4
Rows per page
Query Builder