s1
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

Threats

306568 threats catalogued · filter, sort and triage below.

All Threats · 306568 TOTAL
All With remediations Without
Reset
ID ↕ Title ↕ Severity ↕ Category ↕ RefsRemediations Published ↕ Source updated ↕ APEX Update Time ↕
CVE-2026-114713 CVE-2026-114713 high cve 0 10
CVE-2026-123616 imgproxy 3.3.0 before 4.0.16 Memory Exhaustion DoS via ICO Loader high cve 0 10
CVE-2026-123615 imgproxy before 4.0.17 Out-of-Bounds Write in ICO Loader high cve 0 10
CVE-2026-123614 imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow critical cve 0 10
CVE-2026-123608 Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compression high cve 0 10
CVE-2026-123607 Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Service high cve 0 10
CVE-2026-123606 Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplification high cve 0 10
CVE-2026-123604 Hickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loop high cve 0 10
CVE-2026-123602 Hickory DNS Recursor Ghost Domain Attack via Child-Side NS RRset Caching high cve 0 10
CVE-2026-123601 Hickory DNS 0.26.0-beta.1 before 0.26.2 NSEC3 Proof of Nonexistence Forgery high cve 0 10
CVE-2026-123596 Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC high cve 0 10
CVE-2026-123595 Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC3 high cve 0 10
CVE-2026-123592 Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Name Hash Collision high cve 0 10
CVE-2026-123591 Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Missing RFC 6840 Checks high cve 0 10
CVE-2026-123588 Hickory DNS Recursive Resolver Denial of Service via Cached Empty Connection Pool high cve 0 10
CVE-2026-123587 Hickory-DNS 0.26.0 before 0.26.2 DNSSEC Nonexistence Forgery via Wraparound NSEC high cve 0 10
CVE-2026-123586 Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals high cve 0 10
CVE-2026-123584 Hickory-DNS 0.26.0 before 0.26.2 UDP Client Denial of Service via Spoofed Responses high cve 0 10
CVE-2026-123580 Hickory-DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Nonexistence Proof Forgery via NSEC3 high cve 0 10
CVE-2026-123577 Hickory DNS 0.24.0 before 0.26.2 DoH Unbounded Request Body Denial of Service high cve 0 10
CVE-2026-123576 Hickory DNS 0.24.0 through 0.26.1 Memory Exhaustion via DNS-over-QUIC Requests high cve 0 10
CVE-2026-123575 Hickory DNS before 0.26.2 DoH Memory Exhaustion via Incomplete Request Bodies high cve 0 10
CVE-2026-123574 Hickory DNS 0.24.0 before 0.26.2 Denial of Service via Zone File Parser high cve 0 10
CVE-2026-123573 hickory-dns from 0.20.1 before 0.26.2 Panic in SVCB/HTTPS Zone File Parser high cve 0 10
CVE-2026-123572 Hickory-dns 0.20.1 before 0.26.2 Panic DoS via SVCB/HTTPS Zone Parser high cve 0 10
CVE-2026-123571 Hickory DNS from 0.26.0 before 0.26.2 Panic via TSIG RDATA Decoding high cve 0 10
CVE-2026-123570 Hickory DNS from 0.18 before 0.26.2 Memory Amplification DoS via RR Counts high cve 0 10
CVE-2026-123569 Devalue before 5.6.3 Denial of Service via Sparse Array Serialization high cve 0 10
CVE-2026-123566 Devalue before 5.9.3 CPU Amplification Denial of Service via uneval high cve 0 10
CVE-2026-123565 Devalue before 5.9.3 Quadratic Expansion Denial of Service via uneval high cve 0 10
CVE-2026-123564 Sveltejs devalue before 5.9.3 Memory Exhaustion via uneval Sparse Arrays high cve 0 10
CVE-2026-123563 Devalue before 5.9.3 Typed-Array Allocation Validation Bypass via parse high cve 0 10
CVE-2026-123562 Devalue 5.8.0 before 5.9.3 Denial of Service via stringifyAsync Unhandled Rejection high cve 0 10
CVE-2026-123560 Zebra before 7.0.0 Sync Denial of Service via Forged Checkpoint Block Body high cve 0 10
CVE-2026-123559 Zebra before 7.0.0 Denial of Service via Quadratic Sighash Computation high cve 0 10
CVE-2026-123558 Zebra before 7.0.0 Checkpoint Sync Denial of Service via Cancelled Verifier Rewind high cve 0 10
CVE-2026-123557 Zebra zebrad before 7.0.0 Reachable Assertion DoS via Peer Disconnection high cve 0 10
CVE-2026-123555 Zebra 2.3.0 before 7.0.0 Denial of Service via Unscored Script Verification Failures high cve 0 10
CVE-2026-123554 Zebra zebrad 6.4.0 before 7.0.0 Denial of Service via Mempool Coinbase-Maturity Check high cve 0 10
CVE-2026-123551 OpenAM 14.0.0 before 16.1.4 Session Token Disclosure via Notification WebSocket critical cve 0 10
CVE-2026-123550 OpenAM before 16.1.4 SAML Authentication Bypass via Unsigned Assertions critical cve 0 10
CVE-2026-123549 OpenAM before 16.1.4 Privilege Escalation via Self-Registration Attribute Bypass critical cve 0 10
CVE-2026-123545 OpenAM 14.5.1 before 16.1.4 CSRF in OAuth 2.0 Device Flow high cve 0 10
CVE-2026-123543 OpenAM before 16.1.4 Unauthenticated DoS via Unbounded Java Deserialisation high cve 0 10
CVE-2026-123542 OpenAM before 16.1.4 PKCE Bypass in OAuth 2.0 Device Authorization Flow high cve 0 10
CVE-2026-123538 OpenAM before 16.1.4 SAML 1.x Signature Verification Issuer Impersonation high cve 0 10
CVE-2026-123534 Tornado before 6.6 Path Traversal via static_url() Version Hashing high cve 0 10
CVE-2026-123532 gix-fs before 0.24.1 NTLM Credential Disclosure via Windows Symlink UNC Probe high cve 0 10
CVE-2026-123531 Vikunja 1.0.0 before 2.7.1 Pagination Limit Bypass via page=0 Parameter high cve 0 10
CVE-2026-123528 Vikunja before 2.7.1 Insufficient Session Expiration via HTTP Token Middleware high cve 0 10
Showing 1–50 of 306568 threats (page 1 of 6132).