| CVE-2026-123579 | LOW | 3.7 | DNSSEC validation in Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alph… | 2026-11-08 |
| CVE-2026-123580 | HIGH | 7.5 | Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 perform insuffici… | 2026-11-08 |
| CVE-2026-123581 | MEDIUM | 5.3 | Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC … | 2026-11-08 |
| CVE-2026-123582 | LOW | 3.7 | The validating recursive resolver and validating forwarder in Hickory DNS (hickory-server) 0.25.0 before 0.26.… | 2026-11-08 |
| CVE-2026-123583 | LOW | 3.7 | The recursive resolver in Hickory DNS hickory-recursor 0.25.0 through 0.25.2 and hickory-resolver 0.26.0 befor… | 2026-11-08 |
| CVE-2026-123584 | MEDIUM | 5.9 | The hickory-net crate in Hickory DNS 0.26.0 before 0.26.2 stops listening and returns an error when a client U… | 2026-11-08 |
| CVE-2026-123585 | MEDIUM | 5.3 | The hickory-resolver component of Hickory DNS 0.25.0 before 0.26.2 follows irrelevant CNAME records when resol… | 2026-11-08 |
| CVE-2026-123586 | HIGH | 7.5 | Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in its recursive resolv… | 2026-11-08 |
| CVE-2026-123587 | MEDIUM | 6.8 | The DNSSEC validation in the Hickory DNS hickory-net crate 0.26.0 before 0.26.2 identifies wraparound NSEC rec… | 2026-11-08 |
| CVE-2026-123588 | HIGH | 7.5 | The recursive resolver in Hickory DNS (all versions of the hickory-recursor crate, and hickory-resolver 0.26.0… | 2026-11-08 |
| CVE-2026-123589 | MEDIUM | 5.3 | The DNS-over-QUIC (DoQ) server in hickory-server (hickory-dns) before 0.26.2 does not apply any timeout when r… | 2026-11-08 |
| CVE-2026-123590 | MEDIUM | 4.8 | Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 accept NSEC and N… | 2026-11-08 |
| CVE-2026-123591 | MEDIUM | 5.9 | Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 fail to verify, p… | 2026-11-08 |
| CVE-2026-123592 | MEDIUM | 5.9 | The hickory-net crate in Hickory DNS 0.26.0-beta.1 before 0.26.2 allows DNSSEC validation bypass because Name'… | 2026-11-08 |
| CVE-2026-123593 | MEDIUM | 4.8 | Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto 0.24.0 through 0.26.0-alpha.1 compare DN… | 2026-11-08 |
| CVE-2026-123594 | MEDIUM | 4.8 | Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain an NSEC v… | 2026-11-08 |
| CVE-2026-123595 | HIGH | 8.8 | Hickory DNS hickory-proto 0.25 through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DN… | 2026-11-08 |
| CVE-2026-123596 | HIGH | 8.8 | Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC … | 2026-11-08 |
| CVE-2026-123597 | LOW | 3.7 | Hickory DNS hickory-proto 0.25.0-alpha.1 through 0.26.0-alpha.1 and hickory-net before 0.26.2 contain a logic … | 2026-11-08 |
| CVE-2026-123598 | LOW | 3.7 | The validating recursor in Hickory DNS hickory-recursor 0.25.0 through 0.26.0-alpha.1, hickory-resolver 0.26.0… | 2026-11-08 |
| CVE-2026-123599 | LOW | 3.7 | Hickory DNS hickory-proto before 0.26.0-beta.1 and hickory-net before 0.26.2 contain a DNSSEC validation bypas… | 2026-11-08 |
| CVE-2026-123600 | MEDIUM | 4.8 | Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net 0.26.0-alpha.1 before 0.26.2 contain a… | 2026-11-08 |
| CVE-2026-123601 | MEDIUM | 6.5 | Hickory DNS hickory-proto 0.25.0 through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 invert the… | 2026-11-08 |
| CVE-2026-123602 | MEDIUM | 5.9 | The Hickory DNS recursor in all versions of hickory-recursor and in hickory-resolver 0.26.0-beta.1 before 0.26… | 2026-11-08 |
| CVE-2026-123603 | MEDIUM | 6.5 | hickory-proto and hickory-resolver 0.26.0 before 0.26.2, hickory-server 0.25.0-alpha.1 before 0.26.2, and hick… | 2026-11-08 |
| CVE-2026-123604 | HIGH | 7.5 | Hickory DNS hickory-resolver 0.26.0-beta.1 before 0.26.2 contains an unbounded retry loop in NameServerPool::t… | 2026-11-08 |
| CVE-2026-123605 | HIGH | 8.8 | Hickory DNS hickory-proto 0.1 through 0.25.0-alpha.3 and hickory-net before 0.26.2 contain a DNSSEC validation… | 2026-11-08 |
| CVE-2026-123606 | HIGH | 7.5 | The hickory-dns recursor in hickory-recursor 0.25.0-alpha.3 through 0.25.2 and hickory-resolver 0.26.0-alpha.1… | 2026-11-08 |
| CVE-2026-123607 | HIGH | 7.5 | Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 contain an unbounded loo… | 2026-11-08 |
| CVE-2026-123608 | HIGH | 7.5 | Hickory DNS hickory-proto from 0.3.1 before 0.26.1 contains a denial of service vulnerability in BinEncoder th… | 2026-11-08 |
| CVE-2026-123609 | MEDIUM | 4.0 | Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 contains an information disclosure vulnerability wh… | 2026-11-08 |
| CVE-2026-123610 | LOW | 3.7 | rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decom… | 2026-11-08 |
| CVE-2026-123611 | LOW | 3.7 | rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network attackers to poison … | 2026-11-08 |
| CVE-2026-123612 | LOW | 2.3 | rustls 0.23.44 and 0.23.45 contain an information disclosure vulnerability that sends application data buffere… | 2026-11-08 |
| CVE-2026-123613 | MEDIUM | 5.3 | Rustls from 0.23.13 before 0.23.45 accepts TLS 1.3 handshake messages at the wrong encryption level when they … | 2026-11-08 |
| CVE-2026-123614 | CRITICAL | 9.8 | imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers … | 2026-11-08 |
| CVE-2026-123615 | HIGH | 7.5 | imgproxy 3.3.0 before 4.0.17 contains an out-of-bounds heap read and write in the ICO loader's BMP header reco… | 2026-11-08 |
| CVE-2026-123616 | HIGH | 7.5 | imgproxy from 3.3.0 before 4.0.16 contains an unbounded memory allocation vulnerability in the ICO loader that… | 2026-11-08 |
| CVE-2026-124422 | MEDIUM | 6.1 | SunEditor from 3.0.0 before 3.4.0 contains a stored cross-site scripting vulnerability in html.clean() that re… | 2026-11-08 |
| CVE-2026-114713 | HIGH | 8.6 | The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag w… | 2026-11-08 |
| CVE-2026-103303 | NA | N/A | The Turisbook Booking System WordPress plugin through 1.3.8 does not have authorisation and CSRF checks when s… | 2026-11-08 |
| CVE-2026-103375 | NA | N/A | The Antom Payments WordPress plugin through 2.0.11 does not perform any ownership or authorisation check befor… | 2026-11-08 |
| CVE-2026-104307 | NA | N/A | The BackUpWordPress plugin before 3.15 does not perform a capability or nonce check on an AJAX action that cle… | 2026-11-08 |
| CVE-2026-104337 | NA | N/A | The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not verify ownership of an order before return… | 2026-11-08 |
| CVE-2026-104338 | NA | N/A | The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not perform an authorization check on one of i… | 2026-11-08 |
| CVE-2026-104639 | NA | N/A | The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not sanitize and escape a value derived from a… | 2026-11-08 |
| CVE-2026-105970 | NA | N/A | The Thanh Toán Quét Mã QR Code Tự Động WordPress plugin through 2.0.1 does not properly verify the authentici… | 2026-11-08 |
| CVE-2026-106015 | NA | N/A | The Ecommerce Affiliate WordPress plugin through 1.0.0 does not restrict one-time password issuance and verifi… | 2026-11-08 |
| CVE-2026-109925 | NA | N/A | The Productive Commerce WordPress plugin before 1.1.54 does not sanitise and escape a parameter before using … | 2026-11-08 |
| CVE-2026-110132 | NA | N/A | The Sync Post With Other Site WordPress plugin before 1.9.4 does not properly authorize a content-management a… | 2026-11-08 |