Lucene search
+L

999 matches found

Vulnrichment
Vulnrichment
•added 2026/02/09 2:20 p.m.•8 views

CVE-2026-0398 Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS6.1AI score0.00322EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/02/09 2:20 p.m.•22 views

CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS6.1AI score0.00322EPSS
SaveExploits0
OSV
OSV
•added 2026/02/09 2:20 p.m.•13 views

CVE-2026-0398 Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS6.1AI score
SaveExploits0References5
AlpineLinux
AlpineLinux
•added 2026/02/09 2:20 p.m.•34 views

CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS6.1AI score0.00322EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/02/09 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2026-24027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crafted zones can lead to increased incoming network traffic. CVE-2026-24027 Note that Nessus relies on the presence of the package as reported by the vendor...

5.3CVSS6AI score0.00421EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/09 12:00 a.m.•0 views

CVE-2026-24027: Undefined Security Weakness

Crafted zones can lead to increased incoming network traffic...

5.3CVSS6AI score0.00421EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/09 12:00 a.m.•29 views

PowerDNS Recursor(pdns_recursor) 安全漏洞

PowerDNS Recursor pdnsrecursor is a domain name resolution server developed by the Dutch company PowerDNS. PowerDNS Recursor has security vulnerabilities; these vulnerabilities stem from custom zones, which may lead to increased resource usage, and custom CNAME chains, which may cause cache...

5.3CVSS5.8AI score0.00322EPSS
SaveExploits0References2
NVD
NVD
•added 2026/02/05 5:16 p.m.•31 views

CVE-2020-37126

Free Desktop Clock 3.0 contains a stack overflow vulnerability in the Time Zones display name input that allows attackers to overwrite Structured Exception Handler SEH registers. Attackers can exploit the vulnerability by crafting a malicious Unicode input that triggers an access violation and...

9.8CVSS0.0062EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/02/05 4:13 p.m.•21 views

EUVD-2020-31022

Free Desktop Clock 3.0 contains a stack overflow vulnerability in the Time Zones display name input that allows attackers to overwrite Structured Exception Handler SEH registers. Attackers can exploit the vulnerability by crafting a malicious Unicode input that triggers an access violation and...

9.8CVSS5.8AI score0.0062EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/02/05 4:13 p.m.•13 views

CVE-2020-37126

Free Desktop Clock 3.0 contains a stack overflow vulnerability in the Time Zones display name input that allows attackers to overwrite Structured Exception Handler SEH registers. Attackers can exploit the vulnerability by crafting a malicious Unicode input that triggers an access violation and...

9.8CVSS5.8AI score0.0062EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/05 4:13 p.m.•11 views

CVE-2020-37126 Free Desktop Clock x86 Venetian Blinds Zipper 3.0 - Unicode Stack Overflow (SEH)

Free Desktop Clock 3.0 contains a stack overflow vulnerability in the Time Zones display name input that allows attackers to overwrite Structured Exception Handler SEH registers. Attackers can exploit the vulnerability by crafting a malicious Unicode input that triggers an access violation and...

9.8CVSS6.6AI score0.0062EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/05 12:00 a.m.•2 views

CVE-2020-37126: Stack-based Buffer Overflow

Free Desktop Clock 3.0 contains a stack overflow vulnerability in the Time Zones display name input that allows attackers to overwrite Structured Exception Handler SEH registers. Attackers can exploit the vulnerability by crafting a malicious Unicode input that triggers an access violation and...

9.8CVSS6.5AI score0.0062EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/05 12:00 a.m.•34 views

PT-2026-6570

Name of the Vulnerable Software and Affected Versions Free Desktop Clock version 3.0 Description Free Desktop Clock 3.0 contains a stack overflow issue in the Time Zones display name input. This allows attackers to overwrite Structured Exception Handler SEH registers. Exploitation involves crafti...

9.8CVSS5.8AI score0.0062EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/02/04 7:28 p.m.•9 views

CVE-2026-25489

Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers to execute malicious JavaScript in an administrator’s browser. This occurs because the Name & Description fields in Ta...

6.1CVSS5.4AI score0.00393EPSS
SaveExploits1References1
NVD
NVD
•added 2026/02/03 7:16 p.m.•27 views

CVE-2026-25489

Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers to execute malicious JavaScript in an administrator’s browser. This occurs because the Name & Description fields in Ta...

6.1CVSS0.00393EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/02/03 6:07 p.m.•8 views

CVE-2026-25489

Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers to execute malicious JavaScript in an administrator’s browser. This occurs because the Name & Description fields in Ta...

6.1CVSS5.4AI score0.00393EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2026/02/03 6:07 p.m.•12 views

CVE-2026-25489 Craft Commerce has Stored XSS in Tax Zones (Name & Description) Leading to Potential Privilege Escalation

Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers to execute malicious JavaScript in an administrator’s browser. This occurs because the Name & Description fields in Ta...

6.1CVSS5.4AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/02/03 6:07 p.m.•1 views

CVE-2026-25489 Craft Commerce has Stored XSS in Tax Zones (Name & Description) Leading to Potential Privilege Escalation

Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers to execute malicious JavaScript in an administrator’s browser. This occurs because the Name & Description fields in Ta...

6.1CVSS6.7AI score0.00393EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/02/03 6:07 p.m.•42 views

CVE-2026-25489 Craft Commerce has Stored XSS in Tax Zones (Name & Description) Leading to Potential Privilege Escalation

Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers to execute malicious JavaScript in an administrator’s browser. This occurs because the Name & Description fields in Ta...

6.1CVSS0.00393EPSS
SaveExploits1References4
CVE
CVE
•added 2026/02/03 6:07 p.m.•44 views

CVE-2026-25489

Craft Commerce (Craft CMS) has a stored XSS vulnerability in the Tax Zones Name and Description fields that can execute injected JavaScript in an administrator’s browser. Affected versions are 4.0.0-RC1 through 4.10.0 and 5.0.0 through 5.5.1; the issue arises because sanitization is insufficient ...

6.1CVSS6.7AI score0.00393EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder