Lucene search
+L

680 matches found

UbuntuCve
UbuntuCve
•added 2026/05/13 8:16 p.m.•30 views

CVE-2026-28379

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS6.7AI score0.00324EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2026/05/13 7:28 p.m.•32 views

CVE-2026-28379

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS6.7AI score0.00324EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/13 7:28 p.m.•61 views

CVE-2026-28379

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS6.7AI score0.00324EPSS
SaveExploits0References2Affected Software1
Snyk
Snyk
•added 2026/05/12 9:20 p.m.•13 views

Denial of Service (DoS)

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Denial of Service DoS through the handling of system resources. An attacker can cause the application to become unresponsive by sending specially crafted requests that...

8.7CVSS5.8AI score0.01024EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/11 10:16 a.m.•14 views

CVE-2025-10470

The Magic Link authentication flow accepts multiple invalid authentication requests without adequate rate limiting or resource control, leading to uncontrolled memory usage growth. This vulnerability can result in a denial-of-service condition, causing service unavailability for deployments that...

8.6CVSS5.8AI score0.00317EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2026/05/11 10:16 a.m.•65 views

CVE-2025-10470 Denial-of-Service via Magic Link Authentication in WSO2 Identity Server Allows Service Unavailability

The Magic Link authentication flow accepts multiple invalid authentication requests without adequate rate limiting or resource control, leading to uncontrolled memory usage growth. This vulnerability can result in a denial-of-service condition, causing service unavailability for deployments that...

8.6CVSS0.00317EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/11 10:16 a.m.•42 views

CVE-2025-10470

CVE-2025-10470 affects WSO2 Identity Server's Magic Link authentication flow. The vulnerability arises because the flow accepts multiple invalid authentication requests without adequate rate limiting or resource control, causing uncontrolled memory usage growth. This can lead to a denial-of-servi...

8.6CVSS5.9AI score0.00317EPSS
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
•added 2026/05/04 1:37 a.m.•47 views

dotnet: .NET: Denial of Service via stack overflow

A flaw was found in .NET. A remote attacker could exploit a stack overflow vulnerability during encrypted key nested decryption, leading to a Denial of Service DoS. This could make the affected system unavailable to legitimate users...

7.5CVSS6.9AI score0.02444EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/04/24 12:31 a.m.•19 views

EUVD-2026-25363

A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls. Due to inadequate enforcement of constraints on sensitive functions, parameters such as IP addressing, watchd...

8.1CVSS5.7AI score0.00586EPSS
SaveExploits0References4
NVD
NVD
•added 2026/04/24 12:16 a.m.•16 views

CVE-2026-40623

A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls. Due to inadequate enforcement of constraints on sensitive functions, parameters such as IP addressing, watchd...

8.1CVSS0.00586EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/15 12:01 a.m.•19 views

EUVD-2026-22817

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 1.8-rc-1, 17.0.0-rc-1 and 17.5.0-rc-1 and prior include a resource exhaustion vulnerability in REST API endpoints such as...

6.9CVSS5.8AI score0.00699EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/13 12:00 a.m.•18 views

PT-2026-32406

Uncontrolled Resource Consumption CWE-400 in Kibana can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated user with access to the automatic import feature can submit specially crafted requests with excessively large input values. When multiple such requests are sent...

6.5CVSS5.8AI score0.00472EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•15 views

PT-2026-31345

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An authenticated user with access to the automatic import feature can submit specially crafted requests with excessively large input values. When multiple such requests are sent concurrently,...

6.8CVSS6.6AI score0.00472EPSS
SaveExploits0References13
RedHat Linux
RedHat Linux
•added 2026/03/12 3:27 p.m.•31 views

asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation

A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized attacker to perform a Denial of Service DoS attack over a network by allocating resources without limits or throttling. This can lead to the unavailability of the service for legitimate users...

7.5CVSS7AI score0.02444EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/03/12 9:34 a.m.•22 views

asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation

A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized attacker to perform a Denial of Service DoS attack over a network by allocating resources without limits or throttling. This can lead to the unavailability of the service for legitimate users...

7.5CVSS7AI score0.02444EPSS
SaveExploits0References5
CNVD
CNVD
•added 2026/03/12 12:00 a.m.•37 views

OpenClaw Denial of Service Vulnerability (CNVD-2026-13832)

OpenClaw is an open source framework for data acquisition. A denial of service vulnerability exists in OpenClaw. An attacker can exploit this vulnerability by triggering a memory exhaustion via an oversized response with no content-length, resulting in service unavailability...

8.7CVSS5.8AI score0.00788EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/05 12:00 a.m.•25 views

OpenClaw 安全漏洞

OpenClaw is a tool for working with archived files. A denial of service vulnerability exists in OpenClaw. An attacker can exploit this vulnerability to exhaust CPU, memory, and disk resources via a highly inflated ZIP/TAR archive file, resulting in service degradation or system unavailability...

6.7CVSS5.8AI score0.00465EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/02/12 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-25612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take. Collections may...

7.1CVSS6.6AI score0.00357EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/02/11 7:44 p.m.•14 views

CVE-2026-25612

The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take. Collections may inadvertently collide with one another in this representation causing unavailability between them due to conflicting locks...

7.1CVSS5.5AI score0.00357EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/10 6:16 p.m.•23 views

CVE-2026-25612

The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take. Collections may inadvertently collide with one another in this representation causing unavailability between them due to conflicting locks...

7.1CVSS0.00357EPSS
SaveExploits0References2
Rows per page
Query Builder