過去6か月のすべてのCVEを、毎日更新します。

6件中6件を表示

• 中CVE-2026-16515CVSSスコア 4.72026/09/18

  net_icmpv6_send_error() in subsys/net/ip/icmpv6.c implemented only one of the three RFC 4443 section 2.4 suppression rules (do not answer an ICMPv6 error with an ICMPv6 error). It did not check whether the triggering packet's source address identifies a single

  CWE-406
• 中CVE-2026-86202CVSSスコア 4.32026/09/09

  PocketMine-MP versions before 5.39.2 contain a network amplification vulnerability in ActorEventPacket handling that allows clients to trigger consuming animations for all visible players. Attackers can send crafted ActorEventPacket messages to spam animation

  CWE-406
• 中CVE-2026-68080CVSSスコア 6.52026/08/05

  It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are r

  CWE-406apache qpid_broker-j
• 高CVE-2026-54609CVSSスコア 8.62026/07/28

  QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In version 1.0.0, the relay's handleReconnectRequest forwards RECONNECT_REQUEST packets to the host without bounding them, so an unauthenticated client can drive relay-to-host

  CWE-400CWE-406CWE-770
• 中CVE-2026-50045CVSSスコア 5.32026/07/22

  In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single client query for a deeply nested name under a DNSSEC-signed parent can cause Unbound to send more upstream packets per client query than the configured 'max-global-quota'. This effectively bypas

  CWE-406nlnetlabs unbound
• 中CVE-2026-45557CVSSスコア 5.82026/05/19

  Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable system to generate excessive network traffic. Fixed in 15.0.

  CWE-405CWE-406CWE-770