Lucene search
+L

289 matches found

OSV
OSV
•added 2026/09/16 9:17 a.m.•21 views

DEBIAN-CVE-2026-82717

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to...

9.8CVSS6.7AI score0.00782EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/16 9:17 a.m.•13 views

CVE-2026-82717

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to...

9.8CVSS6.5AI score
SaveExploits0References1
NVD
NVD
•added 2026/09/16 9:17 a.m.•15 views

CVE-2026-82717

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to...

9.8CVSS0.00782EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/16 9:17 a.m.•10 views

ALPINE-CVE-2026-82717

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to...

9.8CVSS6.7AI score0.00782EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/16 9:17 a.m.•10 views

AZL-101700 CVE-2026-82717 affecting package unbound for versions less than 1.26.1-1

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to...

9.8CVSS6.7AI score0.00782EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/16 9:17 a.m.•15 views

CVE-2026-82717

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to...

9.8CVSS6.7AI score0.00782EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/16 9:17 a.m.•9 views

UBUNTU-CVE-2026-82717

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to...

9.8CVSS6.7AI score0.00782EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/16 8:31 a.m.•16 views

CVE-2026-82717 CNAME synthesis could lead to heap corruption

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to...

9.5CVSS6.7AI score0.00782EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/16 8:31 a.m.•44 views

CVE-2026-82717 CNAME synthesis could lead to heap corruption

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to...

9.5CVSS0.00782EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/16 8:31 a.m.•13 views

EUVD-2026-80292

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to...

9.5CVSS6.7AI score0.00782EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/09/16 8:31 a.m.•20 views

CVE-2026-82717

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to...

9.8CVSS6.7AI score0.00782EPSS
SaveExploits0
CVE
CVE
•added 2026/09/16 8:31 a.m.•81 views

CVE-2026-82717

NLnet Labs Unbound versions up to and including 1.26.0 are affected by a heap buffer overflow in CNAME synthesis during upstream response processing. When the resolver enforces a max TTL value in the packet buffer, a compression pointer pointing to the overwritten value invalidates the domain nam...

9.8CVSS6.7AI score0.00782EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
•added 2026/09/16 8:31 a.m.•13 views

CVE-2026-82717

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to...

9.8CVSS6.7AI score0.00782EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-82717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and...

9.8CVSS6.7AI score0.00782EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•7 views

CVE-2026-82717: Heap-based Buffer Overflow

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to...

9.8CVSS6.7AI score0.00782EPSS
SaveExploits0References3
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•7 views

Astra Linux – Vulnerability in Thunderbird

The parent process does not properly check whether the Speech Synthesis feature is enabled when receiving instructions from a child process. This vulnerability affects Thunderbird 91.9...

6.5CVSS6.9AI score0.0044EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/09/11 7:07 p.m.•14 views

Command Injection

Overview projen is a CDK for software projects Affected versions of this package are vulnerable to Command Injection in the task synthesis, which interpolates configuration properties and auto-discovered file names into the generated .projen/tasks.json without escaping shell metacharacters,...

8.4CVSS6AI score0.00234EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/11 7:07 p.m.•14 views

Command Injection

Overview projen is a CDK for software projects Affected versions of this package are vulnerable to Command Injection in the task synthesis, which interpolates configuration properties and auto-discovered file names into the generated .projen/tasks.json without escaping shell metacharacters,...

8.4CVSS6AI score0.00234EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/11 4:17 p.m.•15 views

CVE-2026-89065

Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 might allow context-dependent attackers to recursively delete files and directories outside the project directory that are writable by the environment running projen, via crafted entries in the...

7.1CVSS0.00185EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/11 4:17 p.m.•16 views

CVE-2026-89066

Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attackers to execute arbitrary commands on a developer workstation or continuous integration runner via shell metacharacters in project...

8.4CVSS0.00234EPSS
SaveExploits0References3
Rows per page
Query Builder