138 matches found
Uncontrolled Recursion
Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Uncontrolled Recursion via the simulate pipeline API endpoint. An attacker can cause the creation of a self-referential data...
CVE-2026-72683
A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-ingest-simulate to submit a request that causes a self-referential data structure to be created. Whe...
CVE-2026-72683 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-ingest-simulate to submit a request that causes a self-referential data structure to be created. Whe...
EUVD-2026-58247
A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-ingest-simulate to submit a request that causes a self-referential data structure to be created. Whe...
CVE-2026-72683 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-ingest-simulate to submit a request that causes a self-referential data structure to be created. Whe...
CVE-2026-72683 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-ingest-simulate to submit a request that causes a self-referential data structure to be created. Whe...
CVE-2026-72683
The CVE-2026-72683 issue affects Elasticsearch where an authenticated user able to call the simulate pipeline API can submit a request that creates a self-referential data structure. When processed by an internal component, the operation recurses without bound, causing a fatal error that terminat...
Elasticsearch 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-75)
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint to submit a request that causes a self-referential data structure to be created. When a specific...
CVE-2026-72683: Uncontrolled Recursion
A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-ingest-simulate to submit a request that causes a self-referential data structure to be created. Whe...
EEF-CVE-2026-59252 Missing gas_limit validation in mpp Tempo fee-payer enables wallet drain
Summary Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet, resulting in denial of service for legitimate clients. When the mpp Elixir library is configured as fee payer fee\payer: true, the MPP.Methods.Tempo...
CVE-2026-59252 Missing gas_limit validation in mpp Tempo fee-payer enables wallet drain
Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet, resulting in denial of service for legitimate clients. When the mpp Elixir library is configured as fee payer feepayer: true, the MPP.Methods.Tempo payment meth...
CVE-2026-59252
Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet, resulting in denial of service for legitimate clients. When the mpp Elixir library is configured as fee payer feepayer: true, the MPP.Methods.Tempo payment meth...
CVE-2025-40945: Untrusted Search Path
A vulnerability has been identified in COMOS V10.4.5 All versions V10.4.5.0.2, COMOS V10.6 All versions V10.6.1, Designcenter NX All versions V2512.7000, Simcenter 3D All versions V2512.7000, Simcenter Femap V2506 All versions V2506.0003, Simcenter Femap V2512 All versions V2512.0002, Simcenter...
PT-2026-57998
Name of the Vulnerable Software and Affected Versions COMOS V10.4.5 versions prior to V10.4.5.0.2 COMOS V10.6 versions prior to V10.6.1 Designcenter NX versions prior to V2512.7000 Simcenter 3D versions prior to V2512.7000 Simcenter Femap V2506 versions prior to V2506.0003 Simcenter Femap V2512...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005506)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005506 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: probes: Remove broken LDR literal uprobe support The simulateldrliteral and...
CloudCharge access control vulnerability
CloudCharge is a website for electric vehicle charging management developed by the Swedish company CloudCharge. CloudCharge has a security vulnerability related to access control. This vulnerability stems from the lack of proper authentication mechanisms at WebSocket endpoints, which could allow...
A CISO’s Guide to Threat Management Platforms
Attackers don’t see your organization as a list of CVEs. They see a web of interconnected assets, looking for a single weak link that will give them a path to your most valuable data. A traditional vulnerability scanner might miss these dangerous connections, but a threat management platform is...
Exploit for Deserialization of Untrusted Data in Facebook React
$$\ $$\ $$$$$$$\ $$\ $$\ $$$$$$$$\ $$\ $...