🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-103006 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggreg... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-103005 Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenti... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-102413 Uncaught Exception (CWE-248) in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elastic E... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-102412 Incorrect Authorization (CWE-863) in Kibana can lead to sensitive information disclosure via Accessing Functionality Not Properly Constrained by ACLs ... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-102411 Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to Denial of Service via Excessive Allocation (CAPEC-130). El... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-102410 Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). A... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-102409 Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-102408 Inefficient Regular Expression Complexity (CWE-1333) in Elasticsearch can lead to denial of service via Regular Expression Exponential Blowup (CAPEC-4... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-102407 Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrai... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-102406 Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In this context, "tenant"... | HIGH | ????? | ????? | NVD | 1 day ago |
| CVE-2026-102404 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged auth... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-101029 Gitea's repository migration and pull mirror egress checks could be bypassed with a hostname that returns multiple DNS answers, because the addre... | UNKNOWN | ????? | ????? | NVD | 1 day ago |
| CVE-2026-101027 When `[migrations] ALLOWED_DOMAINS` was configured, a hostname matching the allow list was accepted without checking its resolved address against the ... | HIGH | ????? | ????? | NVD | 1 day ago |
| CVE-2026-106547 A heap-based buffer overflow in H5VM_array_fill() in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly ex... | HIGH | ????? | ????? | NVD | 1 day ago |
| CVE-2026-43598 Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to... | HIGH | ????? | ????? | NVD | 1 day ago |
| CVE-2026-105811 Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample ( q-business-lambda-hook https://github.com/aw... | HIGH | ????? | ????? | NVD | 1 day ago |
| CVE-2026-19029 A heap-based buffer over-read in H5Z__filter_scaleoffset() in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service (a... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-106451 yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load() uses File.createTempFile to create an exclu... | HIGH | ????? | ????? | NVD | 1 day ago |
| CVE-2026-106448 StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor CBOR map decoding path creates ordinary Ja... | HIGH | ????? | ????? | NVD | 1 day ago |
| CVE-2026-105111 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Commons BCEL.
This only happ... | LOW | ????? | ????? | NVD | 1 day ago |