Lucene search
+L

211 matches found

Tenable Nessus
Tenable Nessus
added 2023/06/07 12:0 a.m.41 views

EulerOS Virtualization 2.11.1 : bind (EulerOS-SA-2023-2053)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance,...

7.5CVSS7.2AI score0.48427EPSS
SaveExploits0References8
Circl
Circl
added 2023/06/04 12:27 p.m.9 views

CVE-2023-3094

creationtimestamp| type| source ---|---|--- 2023-06-04 12:27:34+00:00| seen| https://t.me/cibsecurity/64965...

9.8CVSS6.9AI score0.00743EPSS
SaveExploits1References1
NVD
NVD
added 2023/06/04 9:15 a.m.42 views

CVE-2023-3094

A vulnerability classified as critical has been found in code-projects Agro-School Management System 1.0. Affected is the function doUpdateQuestion of the file btnfunctions.php. The manipulation of the argument questionid leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS7.4AI score0.00743EPSS
SaveExploits1References3
CVE
CVE
added 2023/06/04 9:0 a.m.163 views

CVE-2023-3094

The CVE-2023-3094 entry affects code-projects Agro-School Management System 1.0, with the doUpdateQuestion function in btn_functions.php vulnerable to SQL injection via the question_id parameter. Publicly disclosed exploit guidance is available, and remote access is possible. The issue is referen...

9.8CVSS8.3AI score0.00743EPSS
SaveExploits1References3Affected Software1
Oracle linux
Oracle linux
added 2023/05/24 12:0 a.m.68 views

bind9.16 security and bug fix update

32:9.16.23-0.14 - Handle subtle difference between upstream and rhel CVE-2022-3094 32:9.16.23-0.13 - Prevent flooding with UPDATE requests CVE-2022-3094 - Handle RRSIG queries when server-stale is active CVE-2022-3736 - Fix crash when soft-quota is reached and serve-stale is active CVE-2022-3924...

7.5CVSS7AI score0.48427EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/05/20 12:0 a.m.40 views

AlmaLinux 8 : bind9.16 (ALSA-2023:2792)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2792 advisory. - By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying...

7.5CVSS7.3AI score0.48427EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2023/05/16 8:30 a.m.161 views

Moderate: Red Hat Security Advisory: bind9.16 security and bug fix update

An update for bind9.16 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

7.5CVSS7AI score0.48427EPSS
SaveExploits0References7
AlmaLinux
AlmaLinux
added 2023/05/16 12:0 a.m.53 views

Moderate: bind9.16 security and bug fix update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

7.5CVSS6.7AI score0.48427EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2023/05/12 12:0 a.m.45 views

RHEL 9 : bind (RHSA-2023:2261)

"The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2261 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

7.5CVSS7.2AI score0.48427EPSS
SaveExploits0References15
OSV
OSV
added 2023/05/09 12:0 a.m.34 views

ALSA-2023:2261 Moderate: bind security and bug fix update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

7.5CVSS7.2AI score0.48427EPSS
SaveExploits0References10
AlmaLinux
AlmaLinux
added 2023/05/09 12:0 a.m.56 views

Moderate: bind security and bug fix update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

7.5CVSS7.9AI score0.48427EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2023/05/08 12:0 a.m.51 views

EulerOS 2.0 SP11 : bind (EulerOS-SA-2023-1776)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sending a flood of dynamic DNS updates may cause named to allocate large amounts of memory. This, in turn, may cause named to exit due to a lack o...

7.5CVSS7.4AI score0.48427EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2023/05/08 12:0 a.m.28 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2023-1776)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8AI score0.48427EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/04/20 12:0 a.m.48 views

Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2023-161)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-161 advisory. By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS...

7.5CVSS7.2AI score0.48427EPSS
SaveExploits0References18
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/13 5:42 p.m.64 views

Security Bulletin: IBM i DNS is affected by denial of service attacks due to flaws in ISC BIND (CVE-2022-3094, CVE-2022-3736, CVE-2022-3924).

Summary The IBM i DNS Server implementation uses ISC BIND. ISC BIND is vulnerable to denial of service attacks due to allocating memory before checking access permissions and flaws in the implementation of the stale-answer-client-timeout option as described in the vulnerability details section. I...

7.5CVSS7.6AI score0.48427EPSS
SaveExploits0Affected Software5
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.24 views

Debian: Security Advisory (DSA-1934-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.6AI score0.87264EPSS
SaveExploits17References3
CBLMariner
CBLMariner
added 2023/03/02 4:18 a.m.23 views

CVE-2022-3094 affecting package bind 9.16.33-1

CVE-2022-3094 affecting package bind 9.16.33-1. An upgraded version of the package is available that resolves this issue...

7.5CVSS9.8AI score0.13108EPSS
SaveExploits0
Cloud Foundry
Cloud Foundry
added 2023/02/24 12:0 a.m.36 views

USN-5827-1: Bind vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description Rob Schulhof discovered that Bind incorrectly handled a large number of UPDATE messages. A remote attacker could possibly use this issue to cause Bind to consume resources, resulting in a denial of servic...

7.5CVSS8AI score0.48427EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 6:34 p.m.37 views

K23675185: Apache Qpid vulnerabilities CVE-2016-3094 and CVE-2016-4432

Security Advisory Description CVE-2016-3094 PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service broker termination via a crafted authentication attempt, which triggers an uncaught...

9.1CVSS6.8AI score0.08148EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2023/02/16 12:0 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2023:0427-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.13108EPSS
SaveExploits0References4
Rows per page
Query Builder