Lucene search
+L

85 matches found

Vulnrichment
Vulnrichment
added 2020/05/08 12:2 p.m.15 views

CVE-2020-5741

Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code...

7.2AI score0.72936EPSS
SaveExploits4References2
CVE
CVE
added 2020/05/08 12:2 p.m.758 views

CVE-2020-5741

Plex Media Server on Windows prior to version 1.19.3 is affected by CVE-2020-5741: an authenticated attacker can trigger unsafe Python pickle deserialization (Dict file) during camera-upload related processing, leading to remote code execution as the OS user who runs Plex. Public references descr...

7.2CVSS7.2AI score0.72936EPSS
SaveIn wildExploits4References3Affected Software1
OpenVAS
OpenVAS
added 2020/04/16 12:0 a.m.55 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2020-1460)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.1AI score0.40536EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2020/04/02 8:32 a.m.45 views

CVE-2018-5741

To provide fine-grained controls over the ability to use Dynamic DNS DDNS to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update...

6.5CVSS1.6AI score0.03451EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/03/13 12:0 a.m.43 views

EulerOS Virtualization for ARM 64 3.0.2.0 : bind (EulerOS-SA-2020-1203)

According to the versions of the bind packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - It was found that bind does not implement reasonable restrictions for zone sizes. This allows an explicitly configured...

6.5CVSS6.3AI score0.40536EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2020/03/13 12:0 a.m.32 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2020-1203)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.1AI score0.40536EPSS
SaveExploits1References2
NVD
NVD
added 2020/02/08 7:15 p.m.23 views

CVE-2015-5741

The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a request that contains Content-Length and Transfer-Encoding header fields...

9.8CVSS9.3AI score0.02704EPSS
SaveExploits0References7
OSV
OSV
added 2020/02/08 7:15 p.m.4 views

UBUNTU-CVE-2015-5741

The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a request that contains Content-Length and Transfer-Encoding header fields...

9.8CVSS6.8AI score0.02704EPSS
SaveExploits0References3
CVE
CVE
added 2020/02/08 6:2 p.m.227 views

CVE-2015-5741

CVE-2015-5741 : The Go net/http implementation (net/http/transfer.go) before 1.4.3 fails to correctly parse HTTP headers, enabling remote attackers to perform HTTP request smuggling via requests containing both Content-Length and Transfer-Encoding. This is documented across multiple sources in th...

9.8CVSS9AI score0.02704EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2020/02/08 6:2 p.m.43 views

CVE-2015-5741

The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a request that contains Content-Length and Transfer-Encoding header fields...

9.2AI score0.02704EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.44 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2019-2128)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.1AI score0.40536EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.47 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2019-2557)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.1AI score0.40536EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2019/12/31 12:0 a.m.34 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : bind Vulnerability (NS-SA-2019-0232)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has bind packages installed that are affected by a vulnerability: - To provide fine-grained controls over the ability to use Dynamic DNS DDNS to update records in a zone, BIND 9 provides a feature called update-policy. Various...

6.5CVSS6.9AI score0.03451EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2019/12/18 2:26 p.m.47 views

Security Bulletin: IBM i is affected by networking BIND vulnerability CVE-2018-5741

Summary ISC BIND is vulnerable to this security vulnerability. IBM i has addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-5741 DESCRIPTION: ISC BIND could allow a remote authenticated attacker to bypass security restrictions, caused by an error in the documentation of the...

6.5CVSS1.6AI score0.03451EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/10/15 12:0 a.m.26 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : bind Vulnerability (NS-SA-2019-0191)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has bind packages installed that are affected by a vulnerability: - To provide fine-grained controls over the ability to use Dynamic DNS DDNS to update records in a zone, BIND 9 provides a feature called update-policy. Various...

6.5CVSS6.9AI score0.03451EPSS
SaveExploits0References2
Cent OS
Cent OS
added 2019/08/30 2:35 a.m.261 views

bind security update

CentOS Errata and Security Advisory CESA-2019:2057 An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

6.5CVSS6.7AI score0.03451EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2019/08/30 12:0 a.m.64 views

CentOS 7 : bind (CESA-2019:2057)

"An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

6.5CVSS6.8AI score0.03451EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/08/27 12:0 a.m.31 views

Scientific Linux Security Update : bind on SL7.x x86_64 (20190806)

The following packages have been upgraded to a later upstream version: bind 9.11.4. Security Fixes : - bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies CVE-2018-5741 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; i...

6.5CVSS6.8AI score0.03451EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:0 a.m.36 views

RHEL 7 : bind (RHSA-2019:2057)

"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2057 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named C Tenable...

6.5CVSS6.8AI score0.03451EPSS
SaveExploits0References15
RedHat Linux
RedHat Linux
added 2019/08/06 2:1 p.m.166 views

Moderate: Red Hat Security Advisory: bind security, bug fix, and enhancement update

An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

6.5CVSS6.7AI score0.03451EPSS
SaveExploits0References12
Rows per page
Query Builder