최근 6개월의 모든 CVE를 매일 업데이트합니다.

6개 중 6개 표시

• 중간CVE-2026-16515CVSS 점수 4.72026. 9. 18.

  net_icmpv6_send_error() in subsys/net/ip/icmpv6.c implemented only one of the three RFC 4443 section 2.4 suppression rules (do not answer an ICMPv6 error with an ICMPv6 error). It did not check whether the triggering packet's source address identifies a single

  CWE-406
• 중간CVE-2026-86202CVSS 점수 4.32026. 9. 9.

  PocketMine-MP versions before 5.39.2 contain a network amplification vulnerability in ActorEventPacket handling that allows clients to trigger consuming animations for all visible players. Attackers can send crafted ActorEventPacket messages to spam animation

  CWE-406
• 중간CVE-2026-68080CVSS 점수 6.52026. 8. 5.

  It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are r

  CWE-406apache qpid_broker-j
• 높음CVE-2026-54609CVSS 점수 8.62026. 7. 28.

  QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In version 1.0.0, the relay's handleReconnectRequest forwards RECONNECT_REQUEST packets to the host without bounding them, so an unauthenticated client can drive relay-to-host

  CWE-400CWE-406CWE-770
• 중간CVE-2026-50045CVSS 점수 5.32026. 7. 22.

  In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single client query for a deeply nested name under a DNSSEC-signed parent can cause Unbound to send more upstream packets per client query than the configured 'max-global-quota'. This effectively bypas

  CWE-406nlnetlabs unbound
• 중간CVE-2026-45557CVSS 점수 5.82026. 5. 19.

  Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable system to generate excessive network traffic. Fixed in 15.0.

  CWE-405CWE-406CWE-770