CVE Database

8+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS

8 results for "CWE-67"

CVE-2026-103008
6.5 MEDIUM

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted request that causes the server to construct and process a …

Oct 6, 2026
CVE-2026-103006
6.5 MEDIUM

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the …

Oct 6, 2026
CVE-2026-102409
6.5 MEDIUM

Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service, via Excessive …

Oct 6, 2026
CVE-2026-11573

Uncontrolled recursion (CWE-674) in the QDomDocument/QDomNode serialization path of the Qt XML module (QtXml, qtbase). QDomElementPrivate::save() and QDomNodePrivate::save() recurse mutually, consuming one stack frame per …

Sep 8, 2026
CVE-2026-63144
6.5 MEDIUM

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user …

Jul 21, 2026
CVE-2026-56148
6.5 MEDIUM

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted query …

Jul 1, 2026
CVE-2026-33463
5.3 MEDIUM

Operation on a Resource after Expiration or Termination (CWE-672) in Kibana can lead to unauthorized information disclosure. A logic error in how expiration timestamps were …

May 28, 2026
CVE-2024-38434
6.5 MEDIUM

Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass

Jul 21, 2024

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.