438 matches found
GHSA-XHF5-7WJV-PQXP vulnerabilities
Vulnerabilities for packages: kubescape-server-fips, scorecard, grype-fips, steampipe, trivy-operator-fips, zarf-fips, chainctl, cloudbeat-fips, packer, k3s, helm-operator-fips, harvester, kargo, skaffold-fips, kubescape-operator, falco-no-driver, dagger, helm-mapkubeapis, rancher-helm,...
CVE-2026-47262 vulnerabilities
Vulnerabilities for packages: kubescape-server-fips, scorecard, grype-fips, upwind-agent, steampipe, trivy-operator-fips, zarf-fips, chainctl, cloudbeat-fips, packer, k3s, helm-operator-fips, harvester, kargo, skaffold-fips, kubescape-operator, falco-no-driver, dagger, helm-mapkubeapis,...
MAL-2026-6027 Malicious code in @mastra/mcp-registry-registry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ba997a42d41e72f38a36e0a6122b28388f73eb479dc41f7c1b77b6a75f91c8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in yelp-react-component-chaos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711cd262cc670c0e66cf2878b6fa22db21a2e420313a58aa029cbc619f2b27cc On npm install, preinstall.js collects hostname, username, cwd, network interfaces, and the names of environment variables matching...
CVE-2026-36618
Mercusys AC12G EU V1 with firmware AC12GEUV1200909 responds to version.bind CHAOS TXT queries, disclosing the DNS resolver software version unbound 1.22.0, aiding targeted attacks against known vulnerabilities...
CVE-2026-36618
Mercusys AC12G EU V1 with firmware AC12GEUV1200909 responds to version.bind CHAOS TXT queries, disclosing the DNS resolver software version unbound 1.22.0, aiding targeted attacks against known vulnerabilities...
CVE-2026-36618
The Mercusys AC12G (EU) V1 wireless router, running firmware AC12G(EU)_V1_200909 , is susceptible to an information disclosure vulnerability. The device responds to version.bind CHAOS TXT queries, revealing the unbound 1.22.0 DNS resolver software version. This disclosure can facilitate targeted ...
Mercusys AC12G has a vulnerability related to information leakage
The Mercusys AC12G is a Gigabit wireless router produced by the Chinese company Mercusys. The Mercusys AC12G EU V1 AC12G EU V1 version has a security vulnerability. This vulnerability stems from the response to the CHAOS TXT query, and it may lead to the disclosure of the DNS resolver software...
CVE-2026-36618
Mercusys AC12G EU V1 with firmware AC12GEUV1200909 responds to version.bind CHAOS TXT queries, disclosing the DNS resolver software version unbound 1.22.0, aiding targeted attacks against known vulnerabilities...
PT-2026-46004
Mercusys AC12G EU V1 with firmware AC12GEU V1 200909 responds to version.bind CHAOS TXT queries, disclosing the DNS resolver software version unbound 1.22.0, aiding targeted attacks against known vulnerabilities...
CVE-2026-36618
Mercusys AC12G EU V1 with firmware AC12GEUV1200909 responds to version.bind CHAOS TXT queries, disclosing the DNS resolver software version unbound 1.22.0, aiding targeted attacks against known vulnerabilities...
CVE-2026-36618: Exposure of Sensitive Information to an Unauthorized Actor
Mercusys AC12G EU V1 with firmware AC12GEUV1200909 responds to version.bind CHAOS TXT queries, disclosing the DNS resolver software version unbound 1.22.0, aiding targeted attacks against known vulnerabilities...
CVE-2026-5946
Summary of CVE-2026-5946 (CVE entry for named in BIND) : The issue involves the DNS message handling in the BIND 9 recursive resolver (named) when processing DNS classes other than IN (e.g., CHAOS/HESIOD) or non-IN data in questions. According to the sources, specially crafted requests reaching c...
CVE-2026-5946 Invalid handling of CLASS != IN
Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet IN — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes ANY or NONE in the question section. Specially crafted requests reaching the affected code paths — recursio...
EUVD-2026-31107
Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet IN — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes ANY or NONE in the question section. Specially crafted requests reaching the affected code paths — recursio...
CVE-2026-5946
Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet IN — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes ANY or NONE in the question section. Specially crafted requests reaching the affected code paths — recursio...
chaos-database (>=16.0.0, <=17.0.1), chaos-database-mysql (>=12.0.0, <=13.0.0) +4 more potentially affected by unknown CVE via extend-merge (1.0.5)
extend-merge NPM version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on extend-merge and may be impacted: - chaos-database =16.0.0, =12.0.0, =12.0.0, =12.0.0, =4.0.0, =16.0.2, =17.0.1 Source cves: unknown CVE Source advisory: MEND:WS-2020-0433...
CVE-2021-32715 vulnerabilities
Vulnerabilities for packages: chaos-tproxy...