Lucene search
+L

6536 matches found

SUSE CVE
SUSE CVE
•added 2024/09/19 11:52 p.m.•12 views

SUSE CVE-2023-30464

CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...

7.5CVSS9AI score0.00408EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/09/18 9:30 p.m.•46 views

CoreDNS Cache Poisoning via a birthday attack

CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...

7.5CVSS6.8AI score0.00408EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2024/09/18 9:30 p.m.•35 views

GHSA-H92Q-FGPP-QHRQ CoreDNS Cache Poisoning via a birthday attack

CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...

6.3CVSS7.4AI score0.00408EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2024/09/18 9:15 p.m.•16 views

CVE-2023-30464

CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...

7.5CVSS7.2AI score0.00408EPSS
SaveExploits0References2
NVD
NVD
•added 2024/09/18 9:15 p.m.•57 views

CVE-2023-30464

CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...

7.5CVSS0.00408EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/09/18 3:15 p.m.•19 views

CVE-2023-28457

An issue was discovered in Technitium through 11.0.3. It enables attackers to conduct a DNS cache poisoning attack and inject fake responses within 1 second, which is impactful...

7.5CVSS5.8AI score0.00211EPSS
SaveExploits0References2
NVD
NVD
•added 2024/09/18 3:15 p.m.•42 views

CVE-2023-28457

An issue was discovered in Technitium through 11.0.3. It enables attackers to conduct a DNS cache poisoning attack and inject fake responses within 1 second, which is impactful...

7.5CVSS0.00211EPSS
SaveExploits0References2
Veracode
Veracode
•added 2024/09/18 6:58 a.m.•20 views

Cache Poisoning

Next is vulnerable to Cache Poisoning. The vulnerability is due to improper handling of crafted HTTP requests, causing the incorrect caching of non-dynamic server-side rendered routes in the pages router. It allows an attacker to manipulate the cache, potentially serving stale or incorrect conten...

7.5CVSS7.4AI score0.5918EPSS
SaveExploits3References4Affected Software1
CNNVD
CNNVD
•added 2024/09/18 12:00 a.m.•18 views

Technitium DNS Server security vulnerability

Technitium DNS Server is an open source authoritative and recursive DNS server from the Technitium team. It can be used to self-host DNS servers for privacy and security. A security vulnerability exists in Technitium DNS Server version 11.0.3 and earlier, which stems from an attacker being able t...

7.5CVSS6.6AI score0.00211EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/18 12:00 a.m.•5 views

CVE-2023-28457: Insufficient Verification of Data Authenticity

An issue was discovered in Technitium through 11.0.3. It enables attackers to conduct a DNS cache poisoning attack and inject fake responses within 1 second, which is impactful...

7.5CVSS5.7AI score0.00211EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/09/18 12:00 a.m.•45 views

CVE-2023-28457

An issue was discovered in Technitium through 11.0.3. It enables attackers to conduct a DNS cache poisoning attack and inject fake responses within 1 second, which is impactful...

0.00211EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/09/18 12:00 a.m.•31 views

CoreDNS security vulnerabilities

CoreDNS is a DNS server for the CoreDNS community. A security vulnerability exists in CoreDNS version 1.10.1 and earlier, which stems from an attack that enables an attacker to achieve DNS cache poisoning and inject false responses...

7.5CVSS8.9AI score0.00408EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/18 12:00 a.m.•2 views

CVE-2023-30464: Authentication Bypass by Spoofing

CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...

7.5CVSS5.8AI score0.00408EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/09/18 12:00 a.m.•59 views

CVE-2023-30464

CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...

0.00408EPSS
SaveExploits0References1
Mend
Mend
•added 2024/09/18 12:00 a.m.•10 views

CVE-2023-30464

CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...

8.7CVSS0.00408EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2024/09/18 12:00 a.m.•11 views

CVE-2023-30464

CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...

7.5CVSS6.9AI score0.00408EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/09/18 12:00 a.m.•19 views

CVE-2023-30464

CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...

7.1AI score0.00408EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/18 12:00 a.m.•24 views

PT-2024-12165 · Unknown · Technitium

Name of the Vulnerable Software and Affected Versions: Technitium versions through 11.0.3 Description: The issue enables attackers to conduct a DNS cache poisoning attack, allowing them to inject fake responses within 1 second. Recommendations: For versions through 11.0.3, update to a version tha...

7.5CVSS7AI score0.00211EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/09/18 12:00 a.m.•16 views

PT-2024-12235

Name of the Vulnerable Software and Affected Versions CoreDNS versions 1.10.1 and earlier Description The issue allows attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack, enabling them to manipulate DNS responses. Recommendations For CoreDNS versions 1.10.1 a...

7.5CVSS6.1AI score0.00408EPSS
SaveExploits0References25
Vulnrichment
Vulnrichment
•added 2024/09/18 12:00 a.m.•16 views

CVE-2023-28457

An issue was discovered in Technitium through 11.0.3. It enables attackers to conduct a DNS cache poisoning attack and inject fake responses within 1 second, which is impactful...

6.8AI score0.00211EPSS
SaveExploits0References2
Rows per page
Query Builder