CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass)
CVE-2026-33489
### Summary CoreDNS' transfer plugin can select the wrong ACL stanza when both a parent zone and a more-specific subzone
#severity:high
共收录 5513 条相关情报。
← 返回所有主题CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification
CVE-2026-32936
### Summary CoreDNS's DNS-over-HTTPS (DoH) GET path accepts oversized `dns=` query values and performs substantial requ
CoreDNS' DoQ worker pool does not bound stream backlog
CVE-2026-32934
### Summary CoreDNS' DNS-over-QUIC (DoQ) server can be driven into large goroutine and memory growth by a remote client
An unsecured configuration interface on affected devices allows unauthenticated remote attackers...
CVE-2026-3323
An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive inf
AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing...
CVE-2026-7280
AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing privileged local attackers to
Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache...
CVE-2026-41636
Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0.
AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authenticated...
CVE-2026-7279
AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authenticated local attackers to plac
A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function...
CVE-2026-7242
A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setOpenVpnClientCfg of
A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability...
CVE-2026-7240
A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setVpnAc
A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The affected element is...
CVE-2026-7243
A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setRadvdCfg
A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The impacted element...
CVE-2026-7244
A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setWiF
A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of...
CVE-2026-7248
A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of the file tgfile.htm of t
A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the...
CVE-2026-7241
A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setWiFiBasicCfg of th
Penetration Testing engineers at Amazon have identified a security flaw related to request...
CVE-2024-54013
Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server co
Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed...
CVE-2024-54012
Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate i
A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the...
CVE-2026-7247
A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the function file_exten_asp of th
SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute...
CVE-2026-40978
SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via c
In Spring AI, various FilterExpressionConverter implementations accept a filter expression object...
CVE-2026-40967
In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to
A flaw has been found in Totolink N300RT 3.4.0-B20250430. This affects an unknown function of the...
CVE-2026-7219
A flaw has been found in Totolink N300RT 3.4.0-B20250430. This affects an unknown function of the file /boafrm/formIpQoS
A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP...
CVE-2026-1460
A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zy