101 matches found
CVE-2024-8508 affecting package unbound for versions less than 1.19.1-3
CVE-2024-8508 affecting package unbound for versions less than 1.19.1-3. A patched version of the package is available...
libunbound8-1.21.1-1.1 on GA media (moderate)
libunbound8-1.21.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14391-1 Rating: moderate Cross-References: CVE-2024-8508 CVSS scores: CVE-2024-8508 SUSE : 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L CVE-2024-8508 SUSE : 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L...
Fedora: Security Advisory (FEDORA-2024-c07e065747)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Unbound DNS Resolver < 1.21.1 DoS Vulnerability
Unbound DNS Resolver is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Fedora 40 : unbound (2024-c07e065747)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c07e065747 advisory. Fixes CVE-2024-8508 - https://github.com/NLnetLabs/unbound/releases/tag/release-1.21.1 Tenable has extracted the preceding description block directl...
CVE-2024-8508
NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a considerable time applying name compression ...
CVE-2024-8508
NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a considerable time applying name compression ...
CVE-2024-8508
NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a considerable time applying name compression ...
CVE-2020-8508
nsak64.sys in Norman Malware Cleaner 2.08.08 allows users to call arbitrary kernel functions because the passing of function pointers between user and kernel mode is mishandled...
CVE-2020-8508
CVE-2020-8508 affects Norman Malware Cleaner 2.08.08, via nsak64.sys. The root cause is mishandling of passing function pointers between user and kernel modes, enabling an attacker to call arbitrary kernel functions. This results in high-severity impact (partial confidentiality, integrity, and av...
CVE-2020-8508
nsak64.sys in Norman Malware Cleaner 2.08.08 allows users to call arbitrary kernel functions because the passing of function pointers between user and kernel mode is mishandled...
CVE-2019-8508
CVE-2019-8508 describes a kernel-level buffer overflow vulnerability where mounting a maliciously crafted NFS network share could lead to arbitrary code execution with kernel/system privileges. The issue is addressed bymacOS Mojave 10.14.4 via improved bounds checking in the kernel path handling ...
macOS 10.14.x < 10.14.4 Multiple Vulnerabilities
The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.4. It is, therefore, affected by multiple vulnerabilities, including: - Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges. CVE-2019-8508 - An...
CVE-2017-8508
CVE-2017-8508 is a Microsoft Office security feature bypass vulnerability tied to improper handling/parsing of file formats. Connected documents explicitly list CVE-2017-8508 among Outlook/Office-related issues, showing that the bypass affects Office components when parsing certain file formats. ...
KLA11049 Multiple vulnerabilities in Microsoft Office
Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions and spoof user interface. Below is a complete list of vulnerabilities: 1. An improper validating of input before loading...
CVE-2016-8508
Yandex Browser for desktop before 17.1.1.227 does not show Protect similar to Safebrowsing in Chromium warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site...
CVE-2016-8508
CVE-2016-8508 affects Yandex Browser for desktop prior to 17.1.1.227. The issue is that the browser does not show Protect warnings (analogous to Safebrowsing) for web-sites with certain content-types, which could allow a remote attacker to silence protection warnings on a malicious site. The vuln...
CVE-2015-8508
CVE-2015-8508 is a cross-site scripting (XSS) vulnerability in Bugzilla’s showdependencygraph.cgi. The attacker can inject arbitrary script/HTML via a crafted bug summary when a local dot configuration is used. Affected products/versions include Bugzilla 2.x, 3.x, and 4.x before 4.2.16; 4.3.x and...
CVE-2014-8508
Cross-site scripting XSS vulnerability in snetwork.asp in the Denon AVR-3313CI audio/video receiver allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, related to Friendlyname...
CVE-2014-8508
The CVE-2014-8508 vulnerability affects the Denon AVR-3313CI web portal, specifically the s_network.asp page. The root cause is a persistent cross-site scripting (XSS) flaw where unsanitized user-supplied data in parameters related to Friendlyname is reflected and executed. Impact stated in sourc...