PowerDNS Authoritative Server Information Disclosure Vulnerability (2020-05)

PowerDNS Authoritative Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2020-17482

An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory...

PT-2020-15021 · Powerdns +4 · Powerdns Authoritative Server +4

Name of the Vulnerable Software and Affected Versions: PowerDNS Authoritative Server versions prior to 4.3.1 Description: An issue has been found where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory...

ZeroMQ Denial of Service Vulnerability

ZeroMQ is a lightweight distributed messaging engine core library . A security vulnerability exists in versions prior to ZeroMQ 4.3.1-4+deb10u2. The vulnerability originates from a remote unauthenticated client running using the libzmq library to connect to an application and can be exploited by ...

[SECURITY] Fedora 32 Update: libslirp-4.3.1-1.fc32

A general purpose TCP-IP emulator used by virtual machine hypervisors to provide virtual networking services...

QEMU libslirp Buffer Overflow Vulnerability

QEMU Quick Emulator is a suite of simulation processor software by French software developer Fabrice Bellard. The software is fast and cross-platform. libslirp is a general-purpose TCP-IP simulator for managing virtual network services in a hypervisor. A buffer overflow vulnerability exists in th...

CVE-2020-10756

An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6sendechoreply routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory,...

DEBIAN-CVE-2020-14196

In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced...

PT-2020-13924 · Powerdns +1 · Powerdns Recursor +1

Name of the Vulnerable Software and Affected Versions: PowerDNS Recursor versions prior to 4.3.2 PowerDNS Recursor versions 4.2.2 and earlier PowerDNS Recursor versions 4.1.16 and earlier Description: The ACL that restricts access to the internal web server is not properly enforced, allowing...

CVE-2020-10618

LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to sensitive information exposure by unauthorized users...

Information disclosure

LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to sensitive information exposure by unauthorized users...

Broadcom CA API Developer Portal Information Disclosure Vulnerability (CNVD-2020-25821)

Broadcom CA API Developer Portal is an API developer portal product of Broadcom's complete API lifecycle management solution, which provides API release control, API performance monitoring and other functions. An information disclosure vulnerability exists in Broadcom CA API Developer Portal 4.3....

Broadcom CA API Developer Portal Input Validation Error Vulnerability

Broadcom CA API Developer Portal is an API developer portal product of Broadcom's complete API lifecycle management solution, which provides API release control, API performance monitoring and other functions. An input validation error vulnerability exists in the loginRedirect page in Broadcom CA...

Broadcom CA API Developer Portal Access Control Error Vulnerability (CNVD-2020-25820)

Broadcom CA API Developer Portal is an API developer portal product of Broadcom's complete API lifecycle management solution, which provides API release control, API performance monitoring and other functions. A security vulnerability exists in Broadcom CA API Developer Portal 4.3.1 and prior...

WordPress Car Rental System 1.3 Cross Site Scripting

Exploit Title: WordPress Car Rental System 1.3 XSS Vunlerability Google Dork:N/A Date: 2020-04-04 Exploit Author: @ThelastVvV Vendor Homepage: https://codecanyon.net/item/car-rental-system-wordpress-plugin/4239755?srank=3 Version: 1.3 Tested on: 5.4.0-kali4-amd64...

PT-2020-10397 · Unknown · Email Subscribers & Newsletters

Name of the Vulnerable Software and Affected Versions: Email Subscribers & Newsletters versions prior to 4.3.1 Description: The issue is related to a blind SQL injection vulnerability. It allowed SQL statements to be passed to the database in the hash parameter. Recommendations: For versions prio...

UBUNTU-CVE-2019-16770

In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack. If more keepalive connections to Puma are opened than there are threads available, additional connections will wait permanently if the...

Path traversal

An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable...

CVE-2012-2248

An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable...

CVE-2012-2248

An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable...