Lucene search
+L

4067 matches found

Positive Technologies
Positive Technologies
•added 2026/04/01 12:00 a.m.•31 views

PT-2026-30698

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description A persistent denial of service can occur due to resource exhaustion in the LocalImageResolver.java component. This could lead to a local denial of service without requiring...

6.2CVSS6.9AI score0.00101EPSS
SaveExploits1References14
osv_asb
osv_asb
•added 2026/04/01 12:00 a.m.•26 views

ASB-A-456471290

In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2CVSS7AI score0.00101EPSS
SaveExploits1References3
Fedora
Fedora
•added 2026/03/31 12:27 a.m.•17 views

[SECURITY] Fedora 44 Update: bind-9.18.47-1.fc44

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

7.5CVSS7.5AI score0.01599EPSS
SaveExploits0
Fedora
Fedora
•added 2026/03/29 12:50 a.m.•20 views

[SECURITY] Fedora 43 Update: bind-9.18.47-1.fc43

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

7.5CVSS7.5AI score0.01599EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/03/28 12:25 a.m.•17 views

SUSE CVE-2026-33211

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.1, 1.3.3, 1.6.1, 1.9.2, and 1.10.2, the Tekton Pipelines git resolver is vulnerable to path traversal via the pathInRepo parameter. A tenant with permissi...

9.6CVSS7.1AI score0.00729EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/03/28 12:00 a.m.•22 views

Linux Distros Unpatched Vulnerability : CVE-2026-32945

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS...

9.8CVSS6AI score0.00563EPSS
SaveExploits1References2
OPENSUSE Linux
OPENSUSE Linux
•added 2026/03/28 12:00 a.m.•10 views

Security update for python-dynaconf (important)

openSUSE security update: security update for python-dynaconf ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20429-1 Rating: important References: bsc1260063 Cross-References: CVE-2026-33154 Affected Products: openSUSE Leap 16.0...

8.1CVSS5.5AI score0.00536EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2026/03/26 5:10 p.m.•26 views

SUSE CVE-2026-1519

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries see:...

7.5CVSS7.5AI score0.01599EPSS
SaveExploits0References19
RedhatCVE
RedhatCVE
•added 2026/03/25 4:46 p.m.•15 views

CVE-2026-3104

A flaw was found in the BIND resolver. A remote attacker can exploit this vulnerability by querying a specially crafted domain, which causes a memory leak. This memory leak can lead to a Denial of Service DoS condition, making the BIND resolver unavailable to legitimate users. Mitigation To...

7.5CVSS7.5AI score0.01174EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/03/25 3:31 p.m.•14 views

EUVD-2026-15410

A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain. This issue affects BIND 9 versions 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, and 9.20.9-S1 through 9.20.20-S1. BIND 9 versions 9.18.0 through 9.18.46 and 9.18.11-S1 through...

7.5CVSS7.5AI score0.01174EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/03/25 3:31 p.m.•19 views

EUVD-2026-15406

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries see:...

7.5CVSS7.5AI score0.01599EPSS
SaveExploits0References5
osv_opensuse
osv_opensuse
•added 2026/03/25 2:59 p.m.•9 views

OPENSUSE-SU-2026:20429-1 Security update for python-dynaconf

This update for python-dynaconf fixes the following issues: Changes in python-dynaconf: - CVE-2026-33154: Server-Side Template Injection in the @Jinja resolver bsc1260063...

8.1CVSS5.5AI score0.00536EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2026/03/25 2:16 p.m.•12 views

CVE-2026-3104

A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain. This issue affects BIND 9 versions 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, and 9.20.9-S1 through 9.20.20-S1. BIND 9 versions 9.18.0 through 9.18.46 and 9.18.11-S1 through...

7.5CVSS7.3AI score
SaveExploits0References7
NVD
NVD
•added 2026/03/25 2:16 p.m.•25 views

CVE-2026-3104

A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain. This issue affects BIND 9 versions 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, and 9.20.9-S1 through 9.20.20-S1. BIND 9 versions 9.18.0 through 9.18.46 and 9.18.11-S1 through...

7.5CVSS0.01174EPSS
SaveExploits0References7
osv_azl
osv_azl
•added 2026/03/25 2:16 p.m.•14 views

AZL-80981 CVE-2026-3104 affecting package bind for versions less than 9.20.21-1

A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain. This issue affects BIND 9 versions 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, and 9.20.9-S1 through 9.20.20-S1. BIND 9 versions 9.18.0 through 9.18.46 and 9.18.11-S1 through...

7.5CVSS7.4AI score0.01174EPSS
SaveExploits0References1
osv_alpine
osv_alpine
•added 2026/03/25 2:16 p.m.•21 views

ALPINE-CVE-2026-3104

A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain. This issue affects BIND 9 versions 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, and 9.20.9-S1 through 9.20.20-S1. BIND 9 versions 9.18.0 through 9.18.46 and 9.18.11-S1 through...

7.5CVSS7.4AI score0.01174EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/03/25 2:16 p.m.•13 views

CVE-2026-1519

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries see:...

7.5CVSS7.3AI score
SaveExploits0References34
NVD
NVD
•added 2026/03/25 2:16 p.m.•16 views

CVE-2026-1519

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries see:...

7.5CVSS0.01599EPSS
SaveExploits0References34
Cvelist
Cvelist
•added 2026/03/25 1:29 p.m.•76 views

CVE-2026-3104 Memory leak in code preparing DNSSEC proofs of non-existence

A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain. This issue affects BIND 9 versions 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, and 9.20.9-S1 through 9.20.20-S1. BIND 9 versions 9.18.0 through 9.18.46 and 9.18.11-S1 through...

7.5CVSS0.01174EPSS
SaveExploits0References3
Mend
Mend
•added 2026/03/25 1:29 p.m.•3 views

CVE-2026-3104

A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain. This issue affects BIND 9 versions 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, and 9.20.9-S1 through 9.20.20-S1. BIND 9 versions 9.18.0 through 9.18.46 and 9.18.11-S1 through...

8.7CVSS7.4AI score0.01174EPSS
SaveExploits0References7
Rows per page
Query Builder