NI
Vendor
nic
21
CVEs
0
On KEV
1
New 30D
Products
BI7.5
BIRD
nic
4 CVEs0 on KEV1 new
KR8.1
Knot Resolver
nic
15 CVEs0 on KEV0 new
FO9.8
Foris
Nic
1 CVEs0 on KEV0 new
KC7.5
Knot Cms
Nic
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-112112 | BI BIRD nic | 2.3 | Oct 18 | An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations outside the address… |
| CVE-2026-66374 | KR Knot Resolver nic | 8.1 | Jul 25 | Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path |
| CVE-2026-49943 | BI BIRD NIC | 6.3 | Jun 2 | CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the BGP AS_PATH mask matching implementation in nest/a-path.c |
| CVE-2023-50387 | KR Knot Resolver Nic | 7.5 | Feb 14 | Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more… |
| CVE-2023-46317 | KR Knot Resolver Nic | 7.5 | Oct 22 | Knot Resolver before 5.7.0 performs many TCP reconnections upon receiving certain nonsensical responses from servers |
| CVE-2023-26249 | KR Knot Resolver Nic | 7.5 | Feb 21 | Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service |
| CVE-2022-40188 | KR Knot Resolver Nic | 7.5 | Sep 23 | Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity |
| CVE-2022-32983 | KR Knot Resolver Nic | 5.3 | Jun 20 | Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters |
| CVE-2021-40083 | KR Knot Resolver Nic | 7.5 | Aug 25 | Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case (NSEC3 with too many iterations used for a positive wildcard proof) |
| CVE-2021-26928 | BI Bird Nic | 6.8 | Jun 4 | BIRD through 2.0.7 does not provide functionality for password authentication of BGP peers |
| CVE-2018-1110 | KR Knot Resolver Nic | 7.5 | Mar 30 | A flaw was found in knot-resolver before version 2.3.0 |
| CVE-2021-3346 | FO Foris Nic | 9.8 | Jan 29 | Foris before 101.1.1, as used in Turris OS, lacks certain HTML escaping in the login template |
| CVE-2020-12667 | KR Knot Resolver Nic | 7.5 | May 19 | Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue |
| CVE-2019-19331 | KR Knot Resolver Nic | 7.5 | Dec 16 | knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization |
| CVE-2013-5661 | KR Knot Resolver Nic | 5.9 | Nov 5 | Cache Poisoning issue exists in DNS Response Rate Limiting |
| CVE-2019-16159 | BI Bird Nic | 7.5 | Sep 9 | BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow |
| CVE-2019-10191 | KR Knot Resolver Nic | 7.5 | Jul 16 | A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-secure domains to DNSSEC-insecure state,… |
| CVE-2019-10190 | KR Knot Resolver Nic | 7.5 | Jul 16 | A vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0 before 4.1.0 which allows remote attackers to bypass DNSSEC validation for… |
| CVE-2018-10920 | KR Knot Resolver Nic | 6.8 | Aug 2 | Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache |
| CVE-2014-0486 | KC Knot Cms Nic | 7.5 | Mar 27 | Knot DNS before 1.5.2 allows remote attackers to cause a denial of service (application crash) via a crafted DNS message |
| CVE-2018-1000002 | KR Knot Resolver Nic | 3.7 | Jan 22 | Improper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1.5.2) allow attacker in man-in-the-middle position to deny existence of some data… |
