Lucene search
+L

15 matches found

Circl
Circl
added 2026/08/06 1:10 p.m.13 views

CVE-2026-16100

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4hotxsw2a...

6.5CVSS5.3AI score0.00307EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/08/05 4:20 p.m.14 views

Important: Red Hat Security Advisory: Red Hat build of Keycloak 26.6.5 Images Security Update

New images are available for Red Hat build of Keycloak 26.6.5 and Red Hat build of Keycloak 26.6.5 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...

9.8CVSS6.4AI score0.00779EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:29 a.m.15 views

CVE-2019-16100

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-side HTTP traffic from a single source...

7.5CVSS7.1AI score0.01811EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 4:28 p.m.22 views

CVE-2020-16100

It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service's DCOM websocket thread due to improper shutdown of closed websocket connections, preventing it from accepting future DCOM websocket Configuration Client connections. Affected versions are...

7.5CVSS7.2AI score0.01044EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2024/10/25 3:24 p.m.16 views

Security Bulletin: IBM Datapower Operations Dashboard could allow remote attacker to execute arbitrary commands on the system CVE-2017-16100

Summary dns-sync is used by the IBM Datapower Operations Dashboard implementation of networking operations Vulnerability Details CVEID:CVE-2017-16100 DESCRIPTION: Node.js dns-sync module could allow a remote attacker to execute arbitrary commands on the system, caused by the improper validation o...

10CVSS7.5AI score0.05132EPSS
SaveExploits1Affected Software1
Oracle linux
Oracle linux
added 2023/12/13 12:00 a.m.48 views

postgresql:15 security update

pgaudit pgrepack postgres-decoderbufs postgresql 15.5-1 - update to 15.5 - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-39418 Resolves: RHEL-16100, RHEL-16124, RHEL-16139...

8.8CVSS7.1AI score0.04322EPSS
SaveExploits0
NVD
NVD
added 2020/09/15 2:15 p.m.28 views

CVE-2020-16100

It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service's DCOM websocket thread due to improper shutdown of closed websocket connections, preventing it from accepting future DCOM websocket Configuration Client connections. Affected versions are...

7.5CVSS0.01044EPSS
SaveExploits0References1
CVE
CVE
added 2020/09/15 1:21 p.m.45 views

CVE-2020-16100

CVE-2020-16100 describes an unauthenticated remote DCOM websocket connection that can crash the Command Centre service’s DCOM websocket thread due to improper shutdown of closed websocket connections, preventing future DCOM websocket (Configuration Client) connections. Affected versions are v8.20...

7.5CVSS7.7AI score0.01044EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/09/08 4:37 p.m.92 views

CVE-2019-16100

CVE-2019-16100 concerns Silver Peak EdgeConnect SD-WAN (pre-8.1.7.x). The Red Hat advisory and NVD entry describe that remote attackers can trigger a web-interface outage by sending slow client-side HTTP traffic from a single source, affecting the web UI. Affected product: Silver Peak EdgeConnect...

7.5CVSS7.5AI score0.01811EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2019/02/11 7:00 p.m.22 views

CVE-2018-16100

CVE-2018-16100 is rejected/not used and does not represent an active vulnerability entry.

7.4AI score
SaveExploits0
Cvelist
Cvelist
added 2019/02/11 7:00 p.m.7 views

CVE-2018-16100

...

SaveExploits0
NVD
NVD
added 2018/06/07 2:29 a.m.35 views

CVE-2017-16100

dns-sync is a sync/blocking dns resolver. If untrusted user input is allowed into the resolve method then command injection is possible...

10CVSS9.7AI score0.05132EPSS
SaveExploits1References2
CVE
CVE
added 2018/06/07 2:00 a.m.79 views

CVE-2017-16100

dns-sync is a Node.js library that can execute arbitrary commands when untrusted input is provided to the resolve() method, enabling remote code execution. The vulnerability is confirmed in multiple sources, notably the IBM Datapower Operations Dashboard advisory describing an impact on DataPower...

10CVSS9.6AI score0.05132EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2018/06/07 2:00 a.m.43 views

CVE-2017-16100

dns-sync is a sync/blocking dns resolver. If untrusted user input is allowed into the resolve method then command injection is possible...

9.8AI score0.05132EPSS
SaveExploits1References2
Veracode
Veracode
added 2015/03/02 4:29 p.m.24 views

Arbitrary Command Execution Through Shell Metacharacters In API Arguments

The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function. This vulnerability is a duplicate of CVE-2017-16100...

10CVSS9.5AI score0.05132EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder