Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees.Check if you run itEPSS 0.24%Apr 22, 2026
- Critical9.8An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update its configuration to an inv…Check if you run itEPSS 0.38%Apr 22, 2026
- High8.2A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum configured value, triggering an out-of-bounds write leading to a deni…Check if you run itEPSS 0.73%Apr 22, 2026
- High8.1A rogue backend can send a crafted SVCB response to a Discovery of Designated Resolvers request, when requested via either the autoUpgrade (Lua) option to newServer or…Check if you run itEPSS 0.28%Apr 22, 2026
- Critical9.1A cached crafted response can cause an out-of-bounds read if custom Lua code calls getDomainListByAddress() or getAddressListByDomain() on a packet cache.Check if you run itEPSS 1.07%Apr 22, 2026
- High7.5PRSD detection denial of serviceCheck if you run itEPSS 0.35%Apr 22, 2026
- Medium6.5A client might theoretically be able to cause a mismatch between queries sent to a backend and the received responses by sending a flood of perfectly timed queries tha…Check if you run itEPSS 0.17%Apr 22, 2026
- High7.5A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not properly rel…Check if you run itEPSS 0.37%Apr 22, 2026
- High7.5A client can trigger excessive memory allocation by generating a lot of queries that are routed to an overloaded DoH backend, causing queries to accumulate into a buff…Check if you run itEPSS 0.37%Apr 22, 2026
- High7.5A client can trigger a divide by zero error leading to crash by sending a crafted DNSCrypt query.Check if you run itEPSS 0.38%Apr 22, 2026
- High7.5An attacker can create a large number of concurrent DoQ or DoH3 connections, causing unlimited memory allocation in DNSdist and leading to a denial of service.Check if you run itEPSS 0.37%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix use after free of parent_port in cxl_detach_ep() cxl_detach_ep() is called during bot…Check if you run itEPSS 0.16%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix leakage in __construct_region() Failing the first sysfs_update_group() needs to exp…Check if you run itEPSS 0.11%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: perf: Make sure to use pmu_ctx->pmu for groups Oliver reported that x86_pmu_del() ended up doing an…Check if you run itEPSS 0.13%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: driver core: platform: use generic driver_override infrastructure When a driver is probed through _…Check if you run itEPSS 0.13%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: Fix exception exit lock checking for subprogs process_bpf_exit_full() passes check_lock = !cur…Check if you run itEPSS 0.13%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN The BPF interpreter's signed 32-bi…Check if you run itEPSS 0.16%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: HID: asus: avoid memory leak in asus_report_fixup() The asus_report_fixup() function was returning…Check if you run itEPSS 0.12%Apr 22, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: nvme-pci: ensure we're polling a polled queue A user can change the polled queue count at run time.Check if you run itEPSS 0.09%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: avoid memory leak in magicmouse_report_fixup() The magicmouse_report_fixup() funct…Check if you run itEPSS 0.12%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: module: Fix kernel panic when a symbol st_shndx is out of bounds The module loader doesn't check fo…Check if you run itEPSS 0.13%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: HID: apple: avoid memory leak in apple_report_fixup() The apple_report_fixup() function was returni…Check if you run itEPSS 0.12%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create We have recently observed a number of sub…Check if you run itEPSS 0.12%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: esp: fix skb leak with espintcp and async crypto When the TX queue for espintcp is full, esp_output…Check if you run itEPSS 0.13%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix skb_put() panic on non-linear skb during reassembly In iptfs_reassem_cont(), IP-TF…Check if you run itEPSS 0.12%Apr 22, 2026
Sort