336649 matches found
CVE-2026-52863
In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' modules work together, creates a shallow copy of the view name in effect that could lead to memory corruption if the owner of the original view name is jostled out when Unbound is under pressure...
CVE-2026-50045
CVE-2026-50045 affects NLnet Labs Unbound, versions 1.22.0 through 1.25.1. A single client query for a deeply nested name under a DNSSEC-signed parent can cause Unbound to exceed the configured ‘max-global-quota’, effectively bypassing the upstream-traffic amplification limiter. The vulnerability...
CVE-2026-41637
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client terminated DNS-over-QUIC DoQ queries are not accounted properly by Unbound resulting in low-cost inflation of the waiting number of replies for already in-flight resolution queries. This results in degradation of resolution service f...
CVE-2026-65599
n8n is affected by a credential exposure in versions before 1.123.64, 2.29.8, and 2.30.1. When configured with a Google Service Account key, the full PEM private key was incorrectly placed in the JWT header’s kid field (intended as a key identifier). JWT headers are Base64-encoded, not encrypted,...
CVE-2026-2406
Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...
CVE-2026-2406 IDOR in Universe Software's Online Registration and Workflow Management System
Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...
EUVD-2026-47621
Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...
CVE-2026-2406 IDOR in Universe Software's Online Registration and Workflow Management System
Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...
CVE-2026-2406
An authorization bypass in Universe Software's Online Registration and Workflow Management System (through 12022026) is reported as CVE-2026-2406. The vulnerability stems from a user-controlled key, enabling unauthorized access. CVSS v3.1 vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N; base score 6....
CVE-2026-2406
Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...
BELL-CVE-2026-23992
Bulletin has no description...
BELL-CVE-2026-23991
Bulletin has no description...
BELL-CVE-2026-64167 CVE-2026-64167 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-64143 CVE-2026-64143 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-64140 CVE-2026-64140 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-63982 CVE-2026-63982 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-63981 CVE-2026-63981 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-63907 CVE-2026-63907 does not affect BellSoft software
Bulletin has no description...