Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-wm9c-mg5f-4mpg |
9.8 (3.1)
|
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability … | 2026-07-22T15:31:26Z | 2026-07-22T15:31:26Z |
| ghsa-qhh7-j7w3-xfxq |
7.5 (3.1)
|
The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always val… | 2026-07-22T15:31:26Z | 2026-07-22T15:31:26Z |
| ghsa-qg2m-c9gf-4qvp |
|
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security… | 2026-07-22T15:31:25Z | 2026-07-22T15:31:26Z |
| ghsa-jh99-mm75-xrmv |
7.5 (3.1)
|
A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Por… | 2026-07-22T15:31:26Z | 2026-07-22T15:31:26Z |
| ghsa-g5c7-92qw-5486 |
7.5 (3.1)
|
A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone c… | 2026-07-22T15:31:26Z | 2026-07-22T15:31:26Z |
| ghsa-cq66-h8mj-77hh |
7.5 (3.1)
|
It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number… | 2026-07-22T15:31:26Z | 2026-07-22T15:31:26Z |
| ghsa-cc7q-gqfw-hrm4 |
7.5 (3.1)
|
The issue is unexpected program termination based on ordering and/or specific content in responses … | 2026-07-22T15:31:26Z | 2026-07-22T15:31:26Z |
| ghsa-8p39-mp4q-99c8 |
7.5 (3.1)
|
An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft … | 2026-07-22T15:31:26Z | 2026-07-22T15:31:26Z |
| ghsa-89q8-qc36-7m58 |
7.5 (3.1)
|
If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there … | 2026-07-22T15:31:26Z | 2026-07-22T15:31:26Z |
| ghsa-4fw4-hmvf-4www |
6.8 (3.1)
|
BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge… | 2026-07-22T15:31:26Z | 2026-07-22T15:31:26Z |
| ghsa-49wx-869f-rxhj |
|
The Analog Way Picturall Quad Compact Mark II version 3.5.8, contains a local privilege escalation … | 2026-07-22T15:31:26Z | 2026-07-22T15:31:26Z |
| ghsa-42qr-f5rc-vfw9 |
6.5 (3.1)
|
If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid … | 2026-07-22T15:31:26Z | 2026-07-22T15:31:26Z |
| ghsa-36gp-wrgh-j78w |
8.6 (3.1)
|
The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points out… | 2026-07-22T15:31:26Z | 2026-07-22T15:31:26Z |
| ghsa-x9gf-4mqv-47hw |
5.9 (3.1)
|
In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound is configured with 'serve-exp… | 2026-07-22T15:31:25Z | 2026-07-22T15:31:25Z |
| ghsa-pp7x-83x2-99v7 |
3.7 (3.1)
|
In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-… | 2026-07-22T15:31:24Z | 2026-07-22T15:31:25Z |
| ghsa-j6hj-wvx2-8wqp |
5.9 (3.1)
|
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigge… | 2026-07-22T15:31:25Z | 2026-07-22T15:31:25Z |
| ghsa-hpr4-88jh-4pvx |
5.9 (3.1)
|
In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dns… | 2026-07-22T15:31:25Z | 2026-07-22T15:31:25Z |
| ghsa-g479-fg97-pf5w |
7.5 (3.1)
|
In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, th… | 2026-07-22T15:31:25Z | 2026-07-22T15:31:25Z |
| ghsa-9vcf-h83p-jghm |
5.9 (3.1)
|
In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together … | 2026-07-22T15:31:25Z | 2026-07-22T15:31:25Z |
| ghsa-9pwr-gcwm-8wj5 |
2.1 (4.0)
|
diff3 tool from GNU diffutils is vulnerable to a heap‑based buffer overflow due to multiple signed … | 2026-07-22T15:31:25Z | 2026-07-22T15:31:25Z |
| ghsa-5gh2-8ch2-g46c |
5.9 (3.1)
|
In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' … | 2026-07-22T15:31:24Z | 2026-07-22T15:31:25Z |
| ghsa-2845-97v4-7wm3 |
4.8 (3.1)
|
In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical R… | 2026-07-22T15:31:25Z | 2026-07-22T15:31:25Z |
| ghsa-x324-pxwv-r76h |
3.7 (3.1)
|
In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stub or forward zones where the name is be… | 2026-07-22T15:31:24Z | 2026-07-22T15:31:24Z |
| ghsa-vxvj-6rhp-3pqq |
7.5 (3.1)
|
In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routin… | 2026-07-22T15:31:24Z | 2026-07-22T15:31:24Z |
| ghsa-vqq3-g95x-fpmr |
6.3 (4.0)
|
In NLnet Labs Unbound 1.6.2 up to and including 1.25.1, when Unbound is configured with the 'respip… | 2026-07-22T15:31:24Z | 2026-07-22T15:31:24Z |
| ghsa-vmhf-793v-3vr8 |
6.5 (3.1)
|
In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when an auth/rpz zone has a configured prim… | 2026-07-22T15:31:24Z | 2026-07-22T15:31:24Z |
| ghsa-v3cq-93xf-4p42 |
7.5 (3.1)
|
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC (DoQ) is ena… | 2026-07-22T15:31:24Z | 2026-07-22T15:31:24Z |
| ghsa-rj42-r8f9-w75j |
5.3 (3.1)
|
In NLnet Labs Unbound up to and including version 1.25.1, when 'unwanted-reply-threshold' is enable… | 2026-07-22T15:31:24Z | 2026-07-22T15:31:24Z |
| ghsa-pjhw-m9f8-mwqg |
5.3 (3.1)
|
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single client query for a deeply nested … | 2026-07-22T15:31:24Z | 2026-07-22T15:31:24Z |
| ghsa-jwg4-375h-655h |
7.5 (3.1)
|
In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels… | 2026-07-22T15:31:24Z | 2026-07-22T15:31:24Z |