Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-41244 | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) | 2026-07-24T01:02:03.000Z | 2026-07-25T14:40:29.000Z |
| msrc_cve-2026-64600 | xfs: resample the data fork mapping after cycling ILOCK | 2026-07-24T01:02:36.000Z | 2026-07-24T01:02:36.000Z |
| msrc_cve-2026-59677 | Process Kill Attack Vector in killall() in seunshare | 2026-07-24T01:02:30.000Z | 2026-07-24T01:02:30.000Z |
| msrc_cve-2026-59676 | Local File Deletion Attack Vector in rm_rf() in seunshare | 2026-07-24T01:02:21.000Z | 2026-07-24T01:02:21.000Z |
| msrc_cve-2026-54171 | Excon: redact additional sensitive/risky headers when following redirects | 2026-07-19T01:01:26.000Z | 2026-07-23T01:44:10.000Z |
| msrc_cve-2026-44508 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43618. Reason: This candidate is a duplicate of CVE-2026-43618. Notes: All CVE users should reference CVE-2026-43618 instead of this candidate. | 2026-07-23T01:06:35.000Z | 2026-07-23T01:06:35.000Z |
| msrc_cve-2026-44510 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43620. Reason: This candidate is a duplicate of CVE-2026-43620. Notes: All CVE users should reference CVE-2026-43620 instead of this candidate. | 2026-07-23T01:06:29.000Z | 2026-07-23T01:06:29.000Z |
| msrc_cve-2026-44509 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43619. Reason: This candidate is a duplicate of CVE-2026-43619. Notes: All CVE users should reference CVE-2026-43619 instead of this candidate. | 2026-07-23T01:06:22.000Z | 2026-07-23T01:06:22.000Z |
| msrc_cve-2026-16277 | Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist() | 2026-07-23T01:06:15.000Z | 2026-07-23T01:06:15.000Z |
| msrc_cve-2026-12080 | Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys | 2026-07-23T01:06:06.000Z | 2026-07-23T01:06:06.000Z |
| msrc_cve-2026-15788 | WCOW cache mount source selector resolves NTFS junctions outside of cache root | 2026-07-23T01:06:00.000Z | 2026-07-23T01:06:00.000Z |
| msrc_cve-2026-26081 | HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected. | 2026-07-23T01:05:54.000Z | 2026-07-23T01:05:54.000Z |
| msrc_cve-2026-26080 | HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected. | 2026-07-23T01:05:48.000Z | 2026-07-23T01:05:48.000Z |
| msrc_cve-2026-15588 | Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering | 2026-07-23T01:05:41.000Z | 2026-07-23T01:05:41.000Z |
| msrc_cve-2026-63308 | Helm Files.Lines Denial of Service via Empty Chart Files | 2026-07-23T01:05:35.000Z | 2026-07-23T01:05:35.000Z |
| msrc_cve-2026-50243 | 'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL | 2026-07-23T01:05:28.000Z | 2026-07-23T01:05:28.000Z |
| msrc_cve-2026-41637 | Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries | 2026-07-23T01:05:22.000Z | 2026-07-23T01:05:22.000Z |
| msrc_cve-2026-50252 | Possible cache poisoning attack by mapping source port population per thread | 2026-07-23T01:05:16.000Z | 2026-07-23T01:05:16.000Z |
| msrc_cve-2026-50251 | Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush | 2026-07-23T01:05:09.000Z | 2026-07-23T01:05:09.000Z |
| msrc_cve-2026-55991 | Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2 | 2026-07-23T01:05:03.000Z | 2026-07-23T01:05:03.000Z |
| msrc_cve-2026-55990 | Packet of death for a DNSCrypt misconfigured Unbound | 2026-07-23T01:04:57.000Z | 2026-07-23T01:04:57.000Z |
| msrc_cve-2026-50046 | Possible heap use-after-free in an error path when a DoT forwarded query is jostled out | 2026-07-23T01:04:51.000Z | 2026-07-23T01:04:51.000Z |
| msrc_cve-2026-14586 | Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments | 2026-07-23T01:04:45.000Z | 2026-07-23T01:04:45.000Z |
| msrc_cve-2026-42955 | Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records | 2026-07-23T01:04:39.000Z | 2026-07-23T01:04:39.000Z |
| msrc_cve-2026-46582 | A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path | 2026-07-23T01:04:32.000Z | 2026-07-23T01:04:32.000Z |
| msrc_cve-2026-54478 | DNS Cookie bypass when combined with proxy-protocol use | 2026-07-23T01:04:26.000Z | 2026-07-23T01:04:26.000Z |
| msrc_cve-2026-56444 | Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration | 2026-07-23T01:04:19.000Z | 2026-07-23T01:04:19.000Z |
| msrc_cve-2026-32665 | Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass | 2026-07-23T01:04:13.000Z | 2026-07-23T01:04:13.000Z |
| msrc_cve-2026-40691 | Packet of death for DNSCrypt over TCP | 2026-07-23T01:04:07.000Z | 2026-07-23T01:04:07.000Z |
| msrc_cve-2026-55717 | 'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash | 2026-07-23T01:04:01.000Z | 2026-07-23T01:04:01.000Z |