60.267 CVE seguite
809 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
Ricerca: dns
441 CVE
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2026-20248 | MED 6.8 | A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the TCP DNS response ha | 0,5% | — |
| CVE-2025-21646 | HIGH 7.5 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: afs: Fix the maximum cell name length The kafs filesystem limits the maximum length of a cell to 256 bytes, but a problem occurs if someone actually does that: kafs tries to create a directo | 0,4% | — |
| CVE-2026-90979 | HIGH 7.3 | apache karaf LDAPCache and LDAPBackingEngine build LDAP search filters for user lookup and role lookup by textually substituting the placeholders %u, %dn, and %fqdn (drawn from the login name, the resolved user DN, and its fully qualified namespace form) into administrator | 0,4% | — |
| CVE-2022-50401 | CRIT 9.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure On error situation `clp->cl_cb_conn.cb_xprt` should not be given a reference to the xprt otherwise both client cleanup and | 0,4% | — |
| CVE-2007-2172 | MED 4.7 | canonical ubuntu_linux A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an "out of bound access" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) funct | 0,4% | — |
| CVE-2010-2524 | HIGH 7.8 | canonical ubuntu_linux The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG_CIFS_DFS_UPCALL is enabled, relies on a user's keyring for the dns_resolver upcall in the cifs.upcall userspace helper, which allows local users to spoof | 0,4% | — |
| CVE-2026-70074 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-69672 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-69369 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2022-23032 | MED 5.3 | f5 big-ip_access_policy_manager In all versions before 7.2.1.4, when proxy settings are configured in the network access resource of a BIG-IP APM system, connecting BIG-IP Edge Client on Mac and Windows is vulnerable to a DNS rebinding attack. Note: Software versions which have reached End o | 0,4% | — |
| CVE-2021-1439 | HIGH 7.4 | cisco aironet_access_point_software A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insuff | 0,4% | — |
| CVE-2024-55599 | MED 5.3 | fortinet fortios An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all versions, 6.4 all versions and FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versi | 0,4% | — |
| CVE-2021-40830 | MED 6.3 | amazon amazon_web_services_aws-c-io The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js appends a user supplied Certificate Authority (CA) to the root CAs instead of overriding it on Unix systems. TLS handshakes will thus succeed if the peer can be verified either from the user-supplied | 0,4% | — |
| CVE-2026-72948 | MED 6.7 | microsoft windows_10_1607 Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. | 0,4% | — |
| CVE-2026-65798 | MED 6.7 | microsoft windows_10_1607 Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-65797 | MED 6.7 | microsoft windows_10_1607 Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-65795 | MED 6.7 | microsoft windows_10_1607 Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-62883 | MED 6.7 | microsoft windows_10_1607 Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-62881 | MED 6.7 | microsoft windows_10_1607 Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-62769 | MED 6.7 | microsoft windows_10_1607 Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2025-59781 | HIGH 7.5 | f5 big-ip_access_policy_manager When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | 0,3% | — |
| CVE-2026-70330 | MED 6.7 | microsoft windows_10_1607 Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-70304 | MED 6.7 | microsoft windows_10_1607 Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-65799 | MED 6.7 | microsoft windows_10_1607 Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69680 | HIGH 8.1 | microsoft windows_10_1607 Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network. | 0,3% | — |