116051 matches found
BELL-CVE-2026-53200 CVE-2026-53200 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-53192
Bulletin has no description...
CGA-6P6P-VMPG-8R7H
Bulletin has no description...
CGA-PPCM-JCWG-GWM4
Bulletin has no description...
CVE-2026-48090
Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, the HTTP OAuth2 filter envoy.filters.http.oauth2 can leave an in-flight async token exchange attached to a downstream stream that has already been torn down. A late...
CVE-2026-47205
Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.36.0 until 1.36.9, 1.37.5, and 1.38.3, a Use-After-Free UAF vulnerability leading to a sudden segmentation fault exists in Envoy's extauthz HTTP filter when processing per-route authorization overrides...
CVE-2026-52690
Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail...
CVE-2026-42390
An invalid zone might pass ZONEMD validation while it should not. This is only relevant if ZoneToCache is configured with ZONEMD validation...
CVE-2026-40012
ECS zero scoped answers are stored in the packet cache while they should not. This impacts only configurations that have ECS enabled;...
CVE-2026-40208
An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame...
CVE-2026-42389
This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers...
CGA-GPW2-8J67-CGW8
Bulletin has no description...
CGA-FCJH-65J7-5HP6
Bulletin has no description...
CGA-4JC3-M65R-HF69
Bulletin has no description...
CGA-33HM-G9CG-GPC8
Bulletin has no description...
CGA-Q99C-PQQ6-C969
Bulletin has no description...
Mongo-Express - Remote Code Execution
Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...
BELL-CVE-2026-57452
Bulletin has no description...
BELL-CVE-2026-57456
Bulletin has no description...
BELL-CVE-2026-57453
Bulletin has no description...