كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 6 من 6

• متوسطةCVE-2026-16515درجة CVSS 4.718‏/09‏/2026

  net_icmpv6_send_error() in subsys/net/ip/icmpv6.c implemented only one of the three RFC 4443 section 2.4 suppression rules (do not answer an ICMPv6 error with an ICMPv6 error). It did not check whether the triggering packet's source address identifies a single

  CWE-406
• متوسطةCVE-2026-86202درجة CVSS 4.309‏/09‏/2026

  PocketMine-MP versions before 5.39.2 contain a network amplification vulnerability in ActorEventPacket handling that allows clients to trigger consuming animations for all visible players. Attackers can send crafted ActorEventPacket messages to spam animation

  CWE-406
• متوسطةCVE-2026-68080درجة CVSS 6.505‏/08‏/2026

  It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are r

  CWE-406apache qpid_broker-j
• عاليةCVE-2026-54609درجة CVSS 8.628‏/07‏/2026

  QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In version 1.0.0, the relay's handleReconnectRequest forwards RECONNECT_REQUEST packets to the host without bounding them, so an unauthenticated client can drive relay-to-host

  CWE-400CWE-406CWE-770
• متوسطةCVE-2026-50045درجة CVSS 5.322‏/07‏/2026

  In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single client query for a deeply nested name under a DNSSEC-signed parent can cause Unbound to send more upstream packets per client query than the configured 'max-global-quota'. This effectively bypas

  CWE-406nlnetlabs unbound
• متوسطةCVE-2026-45557درجة CVSS 5.819‏/05‏/2026

  Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable system to generate excessive network traffic. Fixed in 15.0.

  CWE-405CWE-406CWE-770