Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier.Check if you run itEPSS 0.42%Aug 13, 2026
- Medium6.5A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input.Check if you run itEPSS 0.57%Aug 13, 2026
- Medium4.3A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input.Check if you run itEPSS 0.37%Aug 13, 2026
- Medium6.5A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input.Check if you run itEPSS 0.42%Aug 13, 2026
- Medium6.5A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint (https://www.elastic.co/docs/api/doc/ela…Check if you run itEPSS 0.57%Aug 13, 2026
- Medium6.5Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query.Check if you run itEPSS 0.47%Aug 13, 2026
- Medium6.5Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memory for an internal data structure.Check if you run itEPSS 0.47%Aug 13, 2026
- Medium6.5Memory Allocation with Excessive Size Value (CWE-789) in the ES|QL query processing of Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.42%Aug 13, 2026
- Medium6.5Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230).Check if you run itEPSS 0.42%Aug 13, 2026
- Medium6.5Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.42%Aug 13, 2026
- High8.8The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offs…Check if you run itEPSS 0.60%Aug 13, 2026
- Medium6.5Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the allocation derived from that count is not acco…Check if you run itEPSS 0.42%Aug 13, 2026
- Medium6.5Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153).Check if you run itEPSS 0.42%Aug 13, 2026
- Medium6.5Uncontrolled Recursion (CWE-674) in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.42%Aug 13, 2026
- Low2.1A vulnerability has been found in Calix GigaSpire 26.1.0.Check if you run itEPSS 0.47%Aug 13, 2026
- Low2.1A flaw has been found in Calix GigaSpire 26.1.0.Check if you run itEPSS 0.47%Aug 13, 2026
- Medium4.2The 'podman quadlet install --replace' command opens the existing destination file with O_CREATE|O_WRONLY but omits O_TRUNC.Check if you run itEPSS 0.13%Aug 13, 2026
- Medium4.7Linux Foundationのbackstage/plugin-auth-backendにおけるオープンリダイレクトの脆弱性Check if you run itEPSS 0.17%Aug 13, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IRQs without…Check if you run itEPSS 0.13%Aug 13, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in cca_cipher2protkey Add validation of both the actual key buffe…Check if you run itEPSS 0.16%Aug 13, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests cca_cipher2protkey() derives the copy…Check if you run itEPSS 0.13%Aug 13, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests cca_ecc2protkey() derives the copy le…Check if you run itEPSS 0.13%Aug 13, 2026
- Critical9.8Insufficient Verification of Data AuthenticityPatch nowKEVEPSS 0.27%Aug 13, 2026
- High8.9Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityPatch nowKEVEPSS 71.66%Aug 13, 2026
- LowSSRF via IPv6 transition address bypass of internal-host validationCheck if you run itEPSS 0.37%Aug 13, 2026
Sort