Lucene search
+L

214 matches found

Circl
Circl
added 2022/07/29 10:13 p.m.45 views

CVE-2022-2414

creationtimestamp| type| source ---|---|--- 2022-07-29 22:13:43+00:00| seen| https://t.me/cibsecurity/47279 2022-08-23 15:00:04+00:00| seen| https://t.me/poxek/2343 2022-08-31 13:04:24+00:00| seen| https://t.me/ptswarm/146 2022-12-06 14:42:14+00:00| published-proof-of-concept|...

7.5CVSS7.2AI score0.85608EPSS
SaveIn wildExploits3References15
OSV
OSV
added 2022/07/29 7:15 p.m.5 views

DEBIAN-CVE-2022-2414

Access to external entities when parsing XML documents can lead to XML external entity XXE attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests...

7.5CVSS7.9AI score0.85608EPSS
SaveExploits3References1
CVE
CVE
added 2022/07/29 6:58 p.m.316 views

CVE-2022-2414

CVE-2022-2414 is an XXE vulnerability in Dogtag PKI (pki-core) where XML parsing allows reading arbitrary server files. The CVE description and multiple advisories confirm the issue originates from XML External Entity processing and can lead to sensitive data exposure. Public exploitation materia...

7.5CVSS7.3AI score0.85608EPSS
SaveIn wildExploits3References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/07/21 12:00 a.m.24 views

SUSE SLES15 Security Update : crash (SUSE-SU-2022:2414-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2414-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable, Inc...

5.6AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.29 views

Mageia: Security Advisory (MGASA-2014-0189)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.8AI score0.07571EPSS
SaveExploits0References6
CVE
CVE
added 2021/10/20 10:49 a.m.55 views

CVE-2021-2414

CVE-2021-2414 is an Oracle Communications Session Border Controller (OC-SBC) routing component vulnerability. Affected products/versions: Oracle Communications Session Border Controller, routing component, with affected versions 8.4 and 9.0. Root cause and impact: vulnerability allows a high-priv...

6.8CVSS6.2AI score0.01157EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/10/20 10:49 a.m.11 views

CVE-2021-2414

Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications component: Routing. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

6.8CVSS6.4AI score0.01157EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2014:0733-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.7AI score0.10117EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.30 views

SUSE: Security Advisory (SUSE-SU-2019:2414-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8AI score0.05189EPSS
SaveExploits23References2
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2016:2414-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3CVSS7.8AI score0.05962EPSS
SaveExploits0References9
OSV
OSV
added 2020/11/27 6:15 p.m.9 views

CVE-2020-10772

An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414. Vulnerable versions of Unbound could still amplify an incoming query into a large number of queries directed to a target, even with a lower amplification ratio compared t...

7.5CVSS7.3AI score0.03171EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2020/06/22 10:14 a.m.11 views

unbound: incomplete fix for CVE-2020-12662 in RHEL7

An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414. Vulnerable versions of Unbound could still amplify an incoming query into a large number of queries directed to a target, even with a lower amplification ratio compared t...

7.5CVSS7.3AI score0.03171EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2020/06/11 1:25 p.m.44 views

CVE-2020-10772

An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414. Vulnerable versions of Unbound could still amplify an incoming query into a large number of queries directed to a target, even with a lower amplification ratio compared t...

5CVSS2.5AI score0.03171EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2020/06/10 12:00 a.m.44 views

CentOS 7 : unbound (RHSA-2020:2414)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2414 advisory. - Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an NXNSAttack issue. This is triggered by random subdomains in the...

7.5CVSS6.7AI score0.03588EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2020/06/10 12:00 a.m.40 views

CentOS: Security Advisory for unbound (CESA-2020:2414)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7AI score0.03588EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/06/09 12:00 a.m.48 views

Oracle Linux 7 : unbound (ELSA-2020-2414)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-2414 advisory. 1.6.6-4 - Fix amplifying an incoming query into a large number of queries directed to a target - Resolves: rhbz1839172 CVE-2020-12662, rhbz1840258...

7.5CVSS6.8AI score0.03588EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2020/06/08 12:00 a.m.44 views

RHEL 7 : unbound (RHSA-2020:2414)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2414 advisory. The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: amplification of an...

7.5CVSS6.9AI score0.03588EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:00 a.m.9 views

GE ST-2414 RSTi Slice 4 Points Detection

Binary data 755587.prm...

7.3AI score
SaveExploits0
Veracode
Veracode
added 2019/05/02 4:58 a.m.46 views

Information Disclosure

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

10CVSS7.6AI score0.10117EPSS
SaveExploits1References12Affected Software1
Veracode
Veracode
added 2019/05/02 4:58 a.m.45 views

Privilege Escalation

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

10CVSS7.6AI score0.10117EPSS
SaveExploits1References52Affected Software3
Rows per page
Query Builder