CVEs
Common Vulnerabilities & Exposures ingested from CVE Project cvelistV5, NVD and EUVD. Filter by year or search by ID / title.
252033 CVEs matched. Showing 1–50 (page 1 of 5041).
HIGH and CRITICAL CVEs are auto-promoted to the Threats table; the Threat column below shows the link when a promotion exists.
Click a column header to sort all results; click the active column again to reverse.
| CVE-ID ↕ | Title ↕ | Severity ↕ | Score (overview) ↕ | NVD Score | MSRC Score | CNA ↕ | Published ↕ | Remediations | Threat | Source |
|---|---|---|---|---|---|---|---|---|---|---|
CVE-2026-114713 |
CVE-2026-114713 | HIGH | 8.6 | 8.6 | — | mitre | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-124422 |
SunEditor 3.0.0 before 3.4.0 Stored XSS via html.clean() Iframe Placeholder | MEDIUM | 5.3 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123616 |
imgproxy 3.3.0 before 4.0.16 Memory Exhaustion DoS via ICO Loader | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123615 |
imgproxy before 4.0.17 Out-of-Bounds Write in ICO Loader | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123614 |
imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow | CRITICAL | 9.3 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123613 |
Rustls 0.23.13 before 0.23.45 TLS 1.3 Handshake Encryption Level Bypass | MEDIUM | 6.9 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123612 |
rustls 0.23.44 and 0.23.45 ECH Rejection Application Data Disclosure | MEDIUM | 4.6 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123611 |
rustls before 0.23.46 Key Exchange Downgrade via Unauthenticated ServerHello | MEDIUM | 6.3 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123610 |
rustls before 0.23.46 Denial of Service via Brotli Certificate Decompression | MEDIUM | 6.3 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123609 |
Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 Secret Exposure via Debug | MEDIUM | 4.1 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123608 |
Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compression | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123607 |
Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Service | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123606 |
Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplification | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123604 |
Hickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loop | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123603 |
Hickory DNS Missing IPv4-Mapped IPv6 Canonicalization Access Control Bypass | MEDIUM | 6.9 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123602 |
Hickory DNS Recursor Ghost Domain Attack via Child-Side NS RRset Caching | HIGH | 8.2 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123601 |
Hickory DNS 0.26.0-beta.1 before 0.26.2 NSEC3 Proof of Nonexistence Forgery | HIGH | 8.3 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123600 |
Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 NSEC3 Apex NODATA Validation Bypass | MEDIUM | 6.3 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123599 |
Hickory DNS before 0.26.0-beta.1 DNSSEC Validation Bypass via Non-IN Class Records | MEDIUM | 6.3 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123598 |
Hickory DNS 0.25.0 through 0.26.0-alpha.1 DNSSEC Bogus Answer Cache Poisoning | MEDIUM | 6.3 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123597 |
Hickory DNS DNSSEC Validation Cache Poisoning via Transient DS-Fetch Errors | MEDIUM | 6.3 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123596 |
Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123595 |
Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC3 | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123594 |
Hickory DNS through 0.26.0-alpha.1 DNSSEC NSEC Validation Bypass for Empty Non-Terminals | MEDIUM | 6.3 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123593 |
Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via TrustAnchors | MEDIUM | 6.3 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123592 |
Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Name Hash Collision | HIGH | 8.2 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123591 |
Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Missing RFC 6840 Checks | HIGH | 8.2 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123590 |
Hickory DNS 0.26.0-beta.1 before 0.26.2 Improper NSEC/NSEC3 Signature Validation | MEDIUM | 6.3 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123589 |
Hickory DNS before 0.26.2 Denial of Service via Missing DNS-over-QUIC Request Read Timeout | MEDIUM | 6.9 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123588 |
Hickory DNS Recursive Resolver Denial of Service via Cached Empty Connection Pool | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123587 |
Hickory-DNS 0.26.0 before 0.26.2 DNSSEC Nonexistence Forgery via Wraparound NSEC | HIGH | 8.9 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123586 |
Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123585 |
Hickory DNS 0.25.0 before 0.26.2 Query Amplification via Irrelevant CNAME Records | MEDIUM | 6.9 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123584 |
Hickory-DNS 0.26.0 before 0.26.2 UDP Client Denial of Service via Spoofed Responses | HIGH | 8.2 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123583 |
Hickory DNS 0.25.0 through 0.25.2 Missing Bailiwick Filtering on Negative Responses | MEDIUM | 6.3 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123582 |
Hickory DNS 0.25.0 before 0.26.2 DNSSEC Validation Bypass via SOA Record | MEDIUM | 6.3 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123581 |
Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Unrelated RRset | MEDIUM | 6.9 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123580 |
Hickory-DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Nonexistence Proof Forgery via NSEC3 | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123579 |
Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Wildcard Expansion | MEDIUM | 6.3 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123578 |
Hickory DNS 0.26.0 before 0.26.2 Response Validation Bypass via QDCOUNT=0 | MEDIUM | 6.3 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |
CVE-2026-123577 |
Hickory DNS 0.24.0 before 0.26.2 DoH Unbounded Request Body Denial of Service | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123576 |
Hickory DNS 0.24.0 through 0.26.1 Memory Exhaustion via DNS-over-QUIC Requests | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123575 |
Hickory DNS before 0.26.2 DoH Memory Exhaustion via Incomplete Request Bodies | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123574 |
Hickory DNS 0.24.0 before 0.26.2 Denial of Service via Zone File Parser | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123573 |
hickory-dns from 0.20.1 before 0.26.2 Panic in SVCB/HTTPS Zone File Parser | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123572 |
Hickory-dns 0.20.1 before 0.26.2 Panic DoS via SVCB/HTTPS Zone Parser | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123571 |
Hickory DNS from 0.26.0 before 0.26.2 Panic via TSIG RDATA Decoding | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123570 |
Hickory DNS from 0.18 before 0.26.2 Memory Amplification DoS via RR Counts | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123569 |
Devalue before 5.6.3 Denial of Service via Sparse Array Serialization | HIGH | 8.7 | — | — | VulnCheck | 2026-11-08 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-123568 |
Sveltejs devalue before 5.6.3 Prototype Pollution via uneval Output | LOW | 2.1 | — | — | VulnCheck | 2026-11-08 | — | — | raw · ⬇ |