Wszystkie CVE z ostatnich sześciu miesięcy, aktualizowane codziennie.

Pokazano 6 z 6

• ŚredniCVE-2026-16515Ocena CVSS 4.718 wrz 2026

  net_icmpv6_send_error() in subsys/net/ip/icmpv6.c implemented only one of the three RFC 4443 section 2.4 suppression rules (do not answer an ICMPv6 error with an ICMPv6 error). It did not check whether the triggering packet's source address identifies a single

  CWE-406
• ŚredniCVE-2026-86202Ocena CVSS 4.39 wrz 2026

  PocketMine-MP versions before 5.39.2 contain a network amplification vulnerability in ActorEventPacket handling that allows clients to trigger consuming animations for all visible players. Attackers can send crafted ActorEventPacket messages to spam animation

  CWE-406
• ŚredniCVE-2026-68080Ocena CVSS 6.55 sie 2026

  It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are r

  CWE-406apache qpid_broker-j
• WysokiCVE-2026-54609Ocena CVSS 8.628 lip 2026

  QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In version 1.0.0, the relay's handleReconnectRequest forwards RECONNECT_REQUEST packets to the host without bounding them, so an unauthenticated client can drive relay-to-host

  CWE-400CWE-406CWE-770
• ŚredniCVE-2026-50045Ocena CVSS 5.322 lip 2026

  In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single client query for a deeply nested name under a DNSSEC-signed parent can cause Unbound to send more upstream packets per client query than the configured 'max-global-quota'. This effectively bypas

  CWE-406nlnetlabs unbound
• ŚredniCVE-2026-45557Ocena CVSS 5.819 maj 2026

  Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable system to generate excessive network traffic. Fixed in 15.0.

  CWE-405CWE-406CWE-770