Lucene search
+L

12261 matches found

Positive Technologies
Positive Technologies
added 2026/05/13 12:0 a.m.14 views

PT-2026-42163

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.11.0 through 9.16.50 BIND 9 versions 9.18.0 through 9.18.48 BIND 9 versions 9.20.0 through 9.20.22 BIND 9 versions 9.21.0 through 9.21.21 BIND 9 versions 9.11.3-S1 through 9.16.50-S1 BIND 9 versions 9.18.11-S1 through...

7.8CVSS5.9AI score0.01874EPSS
SaveExploits0References103
Positive Technologies
Positive Technologies
added 2026/05/13 12:0 a.m.14 views

PT-2026-42154

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.0.0 through 9.16.50 BIND 9 versions 9.18.0 through 9.18.48 BIND 9 versions 9.20.0 through 9.20.22 BIND 9 versions 9.21.0 through 9.21.21 BIND 9 versions 9.9.3-S1 through 9.16.50-S1 BIND 9 versions 9.18.11-S1 through 9.18.48-S...

7.8CVSS5.8AI score0.01047EPSS
SaveExploits0References101
Github Security Blog
Github Security Blog
added 2026/05/12 3:7 p.m.16 views

Dalfox Server Mode Vulnerable to Unauthenticated Remote Code Execution via `found-action`

GHSA: Unauthenticated Remote Code Execution via found-action in Dalfox Server Mode Summary When dalfox is started in REST API server mode dalfox server, the server binds to 0.0.0.0:6664 by default and requires no API key unless the operator explicitly passes --api-key. Because model.Options —...

10CVSS6.4AI score0.01471EPSS
SaveExploits2References4Affected Software1
OSV
OSV
added 2026/05/12 10:6 a.m.9 views

RHSA-2026:16064 Red Hat Security Advisory: bind security update

Bulletin has no description...

7.5CVSS5.7AI score0.01545EPSS
SaveExploits0References11
OSV
OSV
added 2026/05/12 10:6 a.m.9 views

RHSA-2026:16060 Red Hat Security Advisory: bind security update

Bulletin has no description...

7.5CVSS5.7AI score0.01545EPSS
SaveExploits0References11
RedHat Linux
RedHat Linux
added 2026/05/11 8:26 p.m.11 views

bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone

A flaw was found in BIND. A remote attacker could exploit this vulnerability by sending a maliciously crafted DNSSEC-validated zone to a BIND resolver. This could cause the resolver to consume excessive CPU resources, leading to a denial of service DoS for legitimate users...

7.5CVSS7.4AI score0.01545EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/05/11 8:26 p.m.13 views

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as havi...

7.5CVSS7.5AI score0.01545EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/05/11 8:0 p.m.13 views

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

7.5CVSS7.5AI score0.01545EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/05/11 8:0 p.m.18 views

bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone

A flaw was found in BIND. A remote attacker could exploit this vulnerability by sending a maliciously crafted DNSSEC-validated zone to a BIND resolver. This could cause the resolver to consume excessive CPU resources, leading to a denial of service DoS for legitimate users...

7.5CVSS7.4AI score0.01545EPSS
SaveExploits0References8
NVD
NVD
added 2026/05/11 6:16 p.m.52 views

CVE-2026-42856

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to 5.1.3, the MCP HTTP transport accepts JSON-RPC tools/call requests with no authentication, session, origin, or token check, and dispatches them directly to the orchestrator's tool registry. The default bind address is 0.0.0.0. ...

8.7CVSS0.00471EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/11 5:42 p.m.68 views

CVE-2026-42856 Network-AI: Missing authentication on MCP HTTP endpoint allows unauthenticated privileged tool calls

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to 5.1.3, the MCP HTTP transport accepts JSON-RPC tools/call requests with no authentication, session, origin, or token check, and dispatches them directly to the orchestrator's tool registry. The default bind address is 0.0.0.0. ...

8.7CVSS0.00471EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/11 5:42 p.m.7 views

CVE-2026-42856

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to 5.1.3, the MCP HTTP transport accepts JSON-RPC tools/call requests with no authentication, session, origin, or token check, and dispatches them directly to the orchestrator's tool registry. The default bind address is 0.0.0.0. ...

8.7CVSS5.8AI score0.00471EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/11 5:42 p.m.16 views

CVE-2026-42856 Network-AI: Missing authentication on MCP HTTP endpoint allows unauthenticated privileged tool calls

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to 5.1.3, the MCP HTTP transport accepts JSON-RPC tools/call requests with no authentication, session, origin, or token check, and dispatches them directly to the orchestrator's tool registry. The default bind address is 0.0.0.0. ...

8.7CVSS5.8AI score0.00471EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/11 10:6 a.m.11 views

RHSA-2026:15890 Red Hat Security Advisory: bind security update

Bulletin has no description...

7.5CVSS7.4AI score0.01545EPSS
SaveExploits0References11
RedHat Linux
RedHat Linux
added 2026/05/11 2:0 a.m.15 views

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...

7.5CVSS7.5AI score0.01545EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.12 views

Unity Linux 20.1060e / 20.1070e Security Update: bind (UTSA-2026-017624)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017624 advisory. BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default setting...

8.1CVSS7AI score0.64161EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.11 views

RHEL 8 : bind (RHSA-2026:15890)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:15890 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named %NASLMINLEVEL...

7.5CVSS7.5AI score0.01545EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.9 views

RHEL 8 : bind (RHSA-2026:16064)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:16064 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named %NASLMINLEVEL...

7.5CVSS5.8AI score0.01545EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.13 views

Unity Linux 20.1060e / 20.1070e Security Update: bind (UTSA-2026-017490)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017490 advisory. In BIND 9.3.0 - 9.11.35, 9.12.0 - 9.16.21, and versions 9.9.3-S1 - 9.11.35-S1 and 9.16.8-S1 - 9.16.21-S1 of BIND Supported Preview Edition, as well as release versio...

5.3CVSS6.4AI score0.08001EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.18 views

Unity Linux 20.1060e / 20.1070e Security Update: bind (UTSA-2026-017654)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017654 advisory. In BIND 9.0.0 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND Supported Preview Edition, as well as release...

7.5CVSS6.9AI score0.11296EPSS
SaveExploits0References4
Rows per page
Query Builder