Lucene search
+L

699 matches found

osv_alpine
osv_alpine
•added 2020/08/21 9:15 p.m.•10 views

ALPINE-CVE-2020-8623

In BIND 9.10.0 - 9.11.21, 9.12.0 - 9.16.5, 9.17.0 - 9.17.3, also affects 9.10.5-S1 - 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulnerable, the system must: be running BIND tha...

7.5CVSS6.7AI score0.064EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2020/08/21 8:50 p.m.•33 views

CVE-2020-8623

In BIND 9.10.0 - 9.11.21, 9.12.0 - 9.16.5, 9.17.0 - 9.17.3, also affects 9.10.5-S1 - 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulnerable, the system must: be running BIND tha...

7.5CVSS6.7AI score0.064EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2020/08/21 2:38 a.m.•33 views

CVE-2020-8623

A flaw was found in bind. An assertion failure can occur when a specially crafted query for a zone signed with an RSA key. BIND must be compiled with "--enable-native-pkcs11" for the system to be affected. The highest threat from this vulnerability is to system availability...

7.5CVSS6.6AI score0.064EPSS
SaveExploits0References4
NVD
NVD
•added 2020/07/22 4:15 p.m.•31 views

CVE-2019-16244

OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query...

9.8CVSS9.3AI score0.0118EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/07/22 4:15 p.m.•14 views

CVE-2019-16244

OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query...

9.8CVSS7.3AI score0.0118EPSS
SaveExploits0References1
Prion
Prion
•added 2020/07/22 4:15 p.m.•22 views

Security feature bypass

OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query...

7.5CVSS9.2AI score0.0118EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/07/22 3:31 p.m.•33 views

CVE-2019-16244

OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query...

9.3AI score0.0118EPSS
SaveExploits0References1
CVE
CVE
•added 2020/07/22 3:31 p.m.•64 views

CVE-2019-16244

OMERO.server contains a vulnerability (CVE-2019-16244) affecting versions prior to 5.6.1 where a crafted query can bypass security filters and access hidden objects. The issue is documented across multiple sources (NVD entry and CNVD/CVE references) with a high-severity impact (CVSS 3.1: Critical...

9.8CVSS9.2AI score0.0118EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/22 12:00 a.m.•8 views

CVE-2019-16244: Undefined Security Weakness

OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query...

9.8CVSS5.8AI score0.0118EPSS
SaveExploits0References1
ArchLinux
ArchLinux
•added 2020/06/28 12:00 a.m.•75 views

[ASA-202006-11] sqlite: arbitrary code execution

Arch Linux Security Advisory ASA-202006-11 ========================================== Severity: High Date : 2020-06-28 CVE-ID : CVE-2020-13871 Package : sqlite Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1182 Summary ======= The package sqlite before...

7.5CVSS1.3AI score0.04447EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2020/05/27 2:42 p.m.•76 views

CVE-2020-13632

ext/fts3/fts3snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo query...

5.5CVSS6.7AI score0.00596EPSS
SaveExploits0
NVD
NVD
•added 2020/01/15 5:15 p.m.•29 views

CVE-2015-5230

The DNS packet parsing/generation code in PowerDNS aka pdns Authoritative Server 3.4.x before 3.4.6 allows remote attackers to cause a denial of service crash via crafted query packets...

7.5CVSS7.3AI score0.09021EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2020/01/15 5:15 p.m.•15 views

CVE-2015-5230

The DNS packet parsing/generation code in PowerDNS aka pdns Authoritative Server 3.4.x before 3.4.6 allows remote attackers to cause a denial of service crash via crafted query packets...

7.5CVSS7.4AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/15 12:00 a.m.•7 views

CVE-2015-5230: Improper Input Validation

The DNS packet parsing/generation code in PowerDNS aka pdns Authoritative Server 3.4.x before 3.4.6 allows remote attackers to cause a denial of service crash via crafted query packets...

7.5CVSS7.1AI score0.09021EPSS
SaveExploits0References2
PyPA
PyPA
•added 2019/12/16 10:15 p.m.•12 views

PYSEC-2019-172

In Apache Incubator Superset before 0.31 user could query database metadata information from a database he has no access to, by using a specially crafted complex query...

5.3CVSS6.7AI score0.02803EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2019/12/16 12:00 a.m.•9 views

PT-2019-12792 · Apache · Apache Incubator Superset

Name of the Vulnerable Software and Affected Versions: Apache Incubator Superset versions prior to 0.31 Description: The issue allows a user to query database metadata information from a database they have no access to, by using a specially crafted complex query. Recommendations: For versions pri...

6.9CVSS5AI score0.02803EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2019/11/01 6:56 p.m.•33 views

CVE-2019-16866

Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule...

7.5CVSS5.9AI score0.03506EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2019/10/03 7:15 p.m.•37 views

CVE-2019-16866

Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule...

7.5CVSS6.8AI score0.03506EPSS
SaveExploits0References4
Prion
Prion
•added 2019/10/03 7:15 p.m.•41 views

Authentication flaw

Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule...

5CVSS7.2AI score0.03506EPSS
SaveExploits0References7Affected Software2
Cvelist
Cvelist
•added 2019/10/03 6:53 p.m.•60 views

CVE-2019-16866

Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule...

7.3AI score0.03506EPSS
SaveExploits0References7
Rows per page
Query Builder