14807 matches found
PT-2026-82340
Name of the Vulnerable Software and Affected Versions community.general Ansible collection affected versions not specified Description A flaw exists in the ipa getkeytab module where the bind pw parameter, used for LDAP simple-bind passwords during Kerberos keytab retrieval, lacks the no log...
Linux Distros Unpatched Vulnerability : CVE-2026-74736
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsbpf: reject dev-bound programs bound to a different device clsbpfprogfromefd obtained a SCHEDCLS program via bpfproggettypedev but never verified...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098970)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098970 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: Refactor bind path to use free After an bind/unbind cycle, the ncm-notifyreq i...
CVE-2026-80198
Kimai versions before 2.56.0 fail to restrict the config Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets including LDAP bind...
CVE-2026-72924
GitHub CLI gh is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the...
CVE-2026-72924
GitHub CLI (gh) versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default, rather than restricting it to loopback. This exposes the forwarded Codespaces service through a wildcard-bound listener on the user's local ...
CLSA-2026-1787659784 bind: Fix of CVE-2023-6516
CVE-2023-6516: unbounded memory growth in a resolver's cache; every RBTDB node queued for tree pruning allocated an event on the cache's quantum-1 database task, so a remote client could make the queue of outstanding pruning events grow without limit. Tree pruning now runs on a task of its own...
CLSA-2026-1787645299 bind: Fix of CVE-2023-6516
CVE-2023-6516: unbounded memory growth in a resolver's cache; every RBTDB node queued for tree pruning allocated an event on the cache's quantum-1 database task, so a remote client could make the queue of outstanding pruning events grow without limit. Tree pruning now runs on a task of its own...
EulerOS Virtualization 2.13.1 : bind (EulerOS-SA-2026-3166)
According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...
EulerOS Virtualization 2.13.0 : bind (EulerOS-SA-2026-3206)
According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a DOS in ISC BIND [CVE-2026-3039]
Summary IBM Watson Speech Services Cartridge is vulnerable to a DOS in ISC BIND, due to a flaw in BIND servers that are configured to use TKEY-based authentication via GSS-API tokens, which makes them vulnerable to excessive memory consumption when receiving and processing maliciously-constructed...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a DOS in ISC BIND [CVE-2026-5946]
Summary IBM Watson Speech Services Cartridge is vulnerable to a DOS in ISC BIND, due to multiple flaws causing an Improper Input Validation CVE-2026-5946. ISC BIND is used as part of our speech utilities. This vulnerability has been addressed. Please read the details for remediation below...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net: sched: clsu32: Undo tcfbindfilter if u32replacehwknode When u32replacehwknode fails, we need to undo the tcf BindFilter operation performed at u32setparms...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bind (UTSA-2026-102699)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102699 advisory. The BIND resolver accepts validly-signed NSEC records where the Next Domain Name field points outside the signer's zone. This issue affects BIND 9 versions 9.11.0...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bind (UTSA-2026-102693)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102693 advisory. If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bind (UTSA-2026-102694)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102694 advisory. It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This...
CVE-2026-55642 dbx: Unauthenticated arbitrary SQL execution in dbx-web (authentication fails open when no password is configured)
dbx is a cross-platform database client for databases. Prior to 0.5.51, dbx-web authmiddleware in crates/dbx-web/src/auth.rs passes every protected request to the handler chain when passwordhash is None. A fresh deployment reaches that state when DBXPASSWORD is unset and no stored password exists...
RHSA-2026:57189 Red Hat Security Advisory: bind security update
Bulletin has no description...
cve-2026-59270 - CRITICAL - Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces
cve-2026-59270 - CRITICAL - Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces...
