|
991
|
5.9 |
MEDIUM
Network
|
-
|
-
|
A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a denial of service.
|
CWE-353
Missing Support for Integrity Check
|
CVE-2026-33261
|
2026-04-23 06:23 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
992
|
5.9 |
MEDIUM
Network
|
-
|
-
|
An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Cookies are disabled by default.
|
CWE-476
NULL Pointer Dereference
|
CVE-2026-33262
|
2026-04-23 06:23 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
993
|
4.4 |
MEDIUM
Network
|
-
|
-
|
An RPZ sent by a malicious authoritative server can result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service.
|
CWE-476
NULL Pointer Dereference
|
CVE-2026-33600
|
2026-04-23 06:23 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
994
|
4.4 |
MEDIUM
Network
|
-
|
-
|
If you use the zoneToCache function with a malicious authoritative server, an attacker can send a zone that result in a null pointer dereference, caused by a missing consistency check and leading to …
|
CWE-476
NULL Pointer Dereference
|
CVE-2026-33601
|
2026-04-23 06:23 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
995
|
5.4 |
MEDIUM
Network
|
-
|
-
|
A flaw was found in Red Hat Quay. When Red Hat Quay requests password re-verification for sensitive operations, such as token generation or robot account creation, the re-authentication prompt can be…
|
CWE-613
Insufficient Session Expiration
|
CVE-2026-6848
|
2026-04-23 06:23 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
996
|
7.1 |
HIGH
Local
|
-
|
-
|
A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the `logs_dir` parameter. This allows the attacker to create…
|
CWE-22
Path Traversal
|
CVE-2026-6855
|
2026-04-23 06:23 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
997
|
7.5 |
HIGH
Network
|
-
|
-
|
A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by …
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2026-6857
|
2026-04-23 06:23 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
998
|
- |
|
-
|
-
|
Incorrect Default Permissions in pcvisit service binary on Windows allows a low-privileged local attacker to escalate their privileges by overwriting the service binary with arbitrary contents. This …
|
CWE-276
Incorrect Default Permissions
|
CVE-2026-0539
|
2026-04-23 06:23 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
999
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Insufficient validation of Chrome extension identifiers in Raindrop.io Bookmark Manager Web App 5.6.76.0 allows attackers to obtain sensitive user data via a crafted request.
|
CWE-20 CWE-284
Improper Input Validation Improper Access Control
|
CVE-2026-31192
|
2026-04-23 06:23 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1000
|
5.3 |
MEDIUM
Network
|
-
|
-
|
An attacker can create a large number of concurrent DoQ or DoH3 connections, causing unlimited memory allocation in DNSdist and leading to a denial of service. DOQ and DoH3 are disabled by default.
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2026-33254
|
2026-04-23 06:23 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|