Lucene search
+L

13269 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-78301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malformed zone may contain an NS or DNAME node above its origin, which named treats as a zone cut. If an attacker inserts a malformed zone into a BIND...

5.8CVSS5.8AI score0.00223EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2026-19941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An inapplicable NSEC record may be accepted by a named resolver as proof that no wildcard exists, which could allow an attacker at the same or an upstream level...

5.9CVSS5.8AI score0.00226EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-19662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker may be able to cause a named resolver to abort. The attack requires inducing the victim resolver to send multiple queries for a DNSSEC-signed zone...

5.9CVSS5.8AI score0.00452EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•1 views

CVE-2026-81736: Excessive Platform Resource Consumption within a Loop

If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing the response. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through...

7.5CVSS5.7AI score0.00859EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•3 views

CVE-2026-78301: Acceptance of Extraneous Untrusted Data With Trusted Data

A malformed zone may contain an NS or DNAME node above its origin, which named treats as a zone cut. If an attacker inserts a malformed zone into a BIND authoritative server e.g., via zone transfer, queries for names inside the configured zone then lose authoritative status and return an...

5.8CVSS5.7AI score0.00223EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•2 views

CVE-2026-19033: Acceptance of Extraneous Untrusted Data With Trusted Data

For a secondary zone with transfers restricted by TSIG, named may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow an attacker that does not actually possess a valid TSIG signature to send unauthorized zone contents to ...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-19666

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On a resolver configured to use dns64, if an applicable answer from the authoritative server is malformed in a specific way, the resolver named process will exi...

7.5CVSS6AI score0.00569EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-75029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In a query response, an attacker may send named multiple copies of a record that should only exist once such as an SOA record. If the RDATA is the same on all t...

5.3CVSS5.8AI score0.00714EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2026-81563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal...

7.5CVSS6AI score0.00672EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-19668

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A BIND recursive resolver may experience excessive resource consumption if it encounters large numbers of a particular kind of invalid DNSSEC record. Default...

5.3CVSS5.8AI score0.00467EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-80274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proo...

7.5CVSS6AI score0.00672EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-90020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: gadget: fix NULL pointer dereference in gadgetdevioctl gadgetdevioctl reads dev-gadget before acquiring dev-lock, but dev-state is checked after acquiring...

5.7AI score0.0021EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2026-77692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker can cause named to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG0 record, and then closing the transport...

7.5CVSS6AI score0.00672EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/15 10:17 p.m.•16 views

CVE-2026-76873

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in the DHCP dynamic IP display and ARP bind list display components handling hostname fields. A LAN-based attacker can inject malicious script through these hostname fields, which is later rendered by...

5.2CVSS0.00237EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/15 10:26 a.m.•11 views

EUVD-2026-78394

PraisonAI is a multi-agent teams system. From 1.6.0 until 1.7.2, AgentOS in src/praisonai-ts/src/os/agentos.ts uses the 0.0.0.0 default from src/praisonai-ts/src/os/config.ts and registers GET /api/agents and POST /api/chat without authentication middleware. A remote caller who can reach the...

9.4CVSS5.8AI score0.00642EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/15 10:26 a.m.•6 views

CVE-2026-57140 PraisonAI AgentOS exposes unauthenticated agent listing and invocation

PraisonAI is a multi-agent teams system. From 1.6.0 until 1.7.2, AgentOS in src/praisonai-ts/src/os/agentos.ts uses the 0.0.0.0 default from src/praisonai-ts/src/os/config.ts and registers GET /api/agents and POST /api/chat without authentication middleware. A remote caller who can reach the...

9.4CVSS5.8AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•13 views

PT-2026-93207

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in the DHCP dynamic IP display and ARP bind list display components handling hostname fields. A LAN-based attacker can inject malicious script through these hostname fields, which is later rendered by network...

5.2CVSS5.6AI score0.00237EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•16 views

PT-2026-92078

FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rts read result function within the RPC gateway transport parser. Attackers can send a malicious BIND ACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort...

7.1CVSS6AI score0.0038EPSS
SaveExploits1References3
CVE
CVE
•added 2026/09/14 1:22 p.m.•25 views

CVE-2026-90961

MISP ≤2.5.45 contains an authentication bypass in the LdapAuth and LinOTPAuth plugins. Both replace CakePHP's FormAuthenticate but omit its _checkFields() validation guard, allowing empty or non-string credentials to reach downstream logic. In the LDAP authenticator, an empty password forwarded t...

9.3CVSS5.7AI score0.0064EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•10 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Remove WARNON from functionfsbind This commit addresses an issue related to a kernel panic that occurs when paniconwarn is enabled. The issue is caused by the unnecessary use of WARNON in functionfsbind, which c...

4.7CVSS6AI score0.00185EPSS
SaveExploits0References2
Rows per page
Query Builder