44746 matches found
Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2
...
Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments
...
DNS Cookie bypass when combined with proxy-protocol use
...
Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass
...
EUVD-2026-47930
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
CVE-2026-52688 RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
CVE-2026-52688
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name
...
CVE-2026-52686
The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...
CVE-2026-52686 Wildcard CNAME proof validation bypass
The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...
CVE-2026-52686 Wildcard CNAME proof validation bypass
The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...
CVE-2026-52686
The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...
'max-global-quota' reset by DNSSEC validation restarts
...
EUVD-2026-47932
If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolve as then then the child records are used immediately if not expired and thus valid, or the records are expired, and in that case not use...
CVE-2026-52684 Prefetch Feature Allows Persistent Ghost Domain Cache Poisoning Attack
If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolve as then then the child records are used immediately if not expired and thus valid, or the records are expired, and in that case not use...
RLSA-2026:42952 Moderate: glibc security update
The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...
[SECURITY] Fedora 44 Update: nginx-mod-fancyindex-0.6.0-8.fc44
The Fancy Index module makes possible the generation of file listings, like the built-in autoindex module does, but adding a touch of style. This is possible because the module allows a certain degree of customization of the generated content: Custom headers. Either local or stored remotely. Cust...
PT-2026-67372
A weakness has been identified in libssh up to 0.11.3. The impacted element is the function sftp extensions get name/sftp extensions get data of the file src/sftp.c of the component SFTP Extension Name Handler. Executing a manipulation of the argument idx can lead to out-of-bounds read. The attac...
PT-2026-64015
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsights.aspx. The injected payload is stored...
PT-2026-64008
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Retention Policy configuration that allows authenticated attackers to inject arbitrary web script or HTML via the policy name parameter to /Archiver/RetentionPolicyWizard.aspx. The injected payload is stored by...