Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-33611 |
medium | 4.9 | 0.0042 | 2026-10-29 | An operator allowed to use the REST API can cause the Authoritative server to produce inva | |
CVE-2026-33610 |
high | 7.5 | 0.0039 | 2026-10-29 | A rogue primary server may cause file descriptor exhaustion and eventually a denial of ser | |
CVE-2026-33609 |
medium | 6.5 | 0.0024 | 2026-10-29 | Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to per | |
CVE-2026-33608 |
critical | 9.8 | 0.0038 | 2026-10-29 | An attacker can send a notify request that causes a new secondary domain to be added to th | |
CVE-2026-33602 |
high | 8.2 | 0.0073 | 2026-10-29 | A rogue backend can send a crafted UDP response with a query ID off by one related to the | |
CVE-2026-33599 |
high | 8.1 | 0.0028 | 2026-10-29 | A rogue backend can send a crafted SVCB response to a Discovery of Designated Resolvers re | |
CVE-2026-33598 |
critical | 9.1 | 0.0107 | 2026-10-29 | A cached crafted response can cause an out-of-bounds read if custom Lua code calls getDoma | |
CVE-2026-33597 |
high | 7.5 | 0.0035 | 2026-10-29 | PRSD detection denial of service | |
CVE-2026-33596 |
medium | 6.5 | 0.0017 | 2026-10-29 | A client might theoretically be able to cause a mismatch between queries sent to a backend | |
CVE-2026-33595 |
high | 7.5 | 0.0037 | 2026-10-29 | A client can trigger excessive memory allocation by generating a lot of errors responses o | |
CVE-2026-33594 |
high | 7.5 | 0.0037 | 2026-10-29 | A client can trigger excessive memory allocation by generating a lot of queries that are r | |
CVE-2026-33593 |
high | 7.5 | 0.0038 | 2026-10-29 | A client can trigger a divide by zero error leading to crash by sending a crafted DNSCrypt | |
CVE-2026-33254 |
high | 7.5 | 0.0037 | 2026-10-29 | An attacker can create a large number of concurrent DoQ or DoH3 connections, causing unlim | |
CVE-2026-31514 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: erofs: set fileio bio | |
CVE-2026-0539 |
high | 8.5 | 0.0010 | 2026-10-29 | Incorrect Default Permissions in pcvisit service binary on Windows allows a low-privileged | |
CVE-2026-6857 |
— | — | 0.0067 | 2026-10-29 | A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization i | |
CVE-2026-6855 |
high | 7.1 | 0.0016 | 2026-10-29 | A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerabi | |
CVE-2026-6848 |
medium | 5.4 | 0.0027 | 2026-10-29 | A flaw was found in Red Hat Quay. When Red Hat Quay requests password re-verification for | |
CVE-2026-33601 |
medium | 4.9 | 0.0051 | 2026-10-29 | If you use the zoneToCache function with a malicious authoritative server, an attacker can | |
CVE-2026-33600 |
medium | 4.9 | 0.0052 | 2026-10-29 | An RPZ sent by a malicious authoritative server can result in a null pointer dereference, | |
CVE-2026-33262 |
medium | 5.9 | 0.0042 | 2026-10-29 | An attacker can send replies that result in a null pointer dereference, caused by a missin | |
CVE-2026-33261 |
medium | 5.9 | 0.0024 | 2026-10-29 | A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a d | |
CVE-2026-33260 |
high | 7.5 | 0.0052 | 2026-10-29 | An attacker can send a web request that causes unlimited memory allocation in the internal | |
CVE-2026-33259 |
medium | 5.0 | 0.0022 | 2026-10-29 | Having many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use af | |
CVE-2026-33258 |
high | 7.5 | 0.0058 | 2026-10-29 | By publishing and querying a crafted zone an attacker can cause allocation of large entrie | |
CVE-2026-33257 |
high | 7.5 | 0.0051 | 2026-10-29 | An attacker can send a web request that causes unlimited memory allocation in the internal | |
CVE-2026-33256 |
high | 7.5 | 0.0061 | 2026-10-29 | An attacker can send a web request that causes unlimited memory allocation in the internal | |
CVE-2026-6846 |
high | 7.8 | 0.0017 | 2026-10-29 | A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing | |
CVE-2026-6845 |
medium | 5.0 | 0.0015 | 2026-10-29 | A flaw was found in binutils, specifically within the `readelf` utility. This vulnerabilit | |
CVE-2026-6844 |
medium | 5.5 | 0.0010 | 2026-10-29 | A flaw was found in the `readelf` utility of the binutils package. A local attacker could | |
CVE-2026-6843 |
medium | 5.5 | 0.0011 | 2026-10-29 | A flaw was found in nano. A local user could exploit a format string vulnerability in the | |
CVE-2026-6842 |
low | 2.5 | 0.0008 | 2026-10-29 | A flaw was found in nano. In environments with permissive umask settings, a local attacker | |
CVE-2026-6023 |
critical | 9.8 | 0.0054 | 2026-10-29 | In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter c | |
CVE-2026-6022 |
high | 7.5 | 0.0029 | 2026-10-29 | In Progress® Telerik® UI for AJAX prior to 2026.1.421, RadAsyncUpload contains an uncontro | |
CVE-2026-40542 |
— | — | 0.0054 | 2026-10-29 | Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cau | |
CVE-2026-6840 |
medium | 5.5 | 0.0010 | 2026-10-29 | Missing bounds validation for operator could allow out of range operator-code lookup duri | |
CVE-2026-6839 |
medium | 6.6 | 0.0010 | 2026-10-29 | Improper validation of STRING tensor offsets could allows malformed string metadata to tri | |
CVE-2026-41667 |
medium | 6.6 | 0.0016 | 2026-10-29 | Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could | |
CVE-2026-41666 |
medium | 6.6 | 0.0014 | 2026-10-29 | Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to | |
CVE-2026-41665 |
medium | 6.1 | 0.0014 | 2026-10-29 | Integer overflow in scratch buffer initialization size calculation in Samsung Open Source | |
CVE-2026-41664 |
medium | 6.6 | 0.0010 | 2026-10-29 | Integer overflow in memory copy size calculation in Samsung Open Source ONE could lead to | |
CVE-2026-40450 |
medium | 6.6 | 0.0014 | 2026-10-29 | Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could c | |
CVE-2026-40449 |
medium | 6.6 | 0.0014 | 2026-10-29 | Integer overflow in buffer size calculation could result in out of bounds memory access wh | |
CVE-2026-40448 |
medium | 5.3 | 0.0012 | 2026-10-29 | Potential Integer overflow in tensor allocation size calculation could lead to insufficien | |
CVE-2026-22754 |
— | — | 0.0027 | 2026-10-29 | Vulnerability in Spring Spring Security. If an application uses <sec:intercept-url servlet | |
CVE-2026-22753 |
high | 7.5 | 0.0025 | 2026-10-29 | Vulnerability in Spring Spring Security. If an application is using securityMatchers(Strin | |
CVE-2026-22748 |
medium | 6.5 | 0.0020 | 2026-10-29 | Vulnerability in Spring Spring Security. When an application configures JWT decoding with | |
CVE-2026-22747 |
high | 8.1 | 0.0024 | 2026-10-29 | Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly | |
CVE-2026-22746 |
low | 3.7 | 0.0022 | 2026-10-29 | Vulnerability in Spring Spring Security. If an application is using the UserDetails#isEnab | |
CVE-2026-40451 |
medium | 5.1 | 0.0017 | 2026-10-29 | DeepL Chrome browser extension versions from v1.22.0 to v.1.23.0 contain a cross-site scri |