Lucene search
+L

607 matches found

Tenable Nessus
Tenable Nessus
added 2016/01/15 12:0 a.m.30 views

PowerDNS Authoritative Server 3.4.4 / 3.4.5 / 3.4.6 Process Packet Handling DoS

According to its self-reported version number, the version of the PowerDNS Authoritative Server listening on the remote host is version 3.4.4, 3.4.5, or 3.4.6. It is, therefore, affected by a denial of service vulnerability due to an assertion flaw that is triggered when handling malformed packet...

5CVSS5.6AI score0.67456EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2016/01/15 12:0 a.m.48 views

PowerDNS Recursor 3.x < 3.7.3 Label Decompression DoS

According to its self-reported version number, the version of the PowerDNS Recursor listening on the remote host is version 3.x prior to 3.7.3. It is, therefore, affected by a denial of service vulnerability due to improper validation of user-supplied input when handling self-referential names...

7.8CVSS6.5AI score0.81834EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2015/12/15 12:0 a.m.10 views

The vulnerability of the Microsoft SQL Server relational database management system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft SQL Server relational database management system is related to the absence of forced blocking of access to uninitialized memory areas. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted query from a remote...

7.1CVSS6.2AI score0.10359EPSS
SaveExploits0References2Affected Software1
F5 Networks
F5 Networks
added 2015/11/30 12:0 a.m.47 views

SOL66871452 - PowerDNS vulnerability CVE-2015-5311

PowerDNS aka pdns Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service assertion failure and server crash via crafted query packets. CVE-2015-5311...

5CVSS5.9AI score0.67456EPSS
SaveExploits0References5
OSV
OSV
added 2015/11/17 3:59 p.m.7 views

CVE-2015-5311

PowerDNS aka pdns Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service assertion failure and server crash via crafted query packets...

6.4AI score
SaveExploits0References7
CNVD
CNVD
added 2015/09/06 12:0 a.m.3 views

BIND DNSSEC Key Handling Error Denial of Service Vulnerability

ISC BIND is a very widely used implementation of the DNS protocol, maintained by ISC. A security vulnerability in ISC BIND 'buffer.c' allows remote users to send a special query that causes the remote Zone DNS server to return a special DNSSEC to the target checksum resolver, triggering the...

7.8CVSS7.5AI score0.33652EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2015/09/03 4:37 a.m.9 views

bind: malformed DNSSEC key failed assertion denial of service

A denial of service flaw was found in the way BIND parsed certain malformed DNSSEC keys. A remote attacker could use this flaw to send a specially crafted DNS query for example, a query requiring a response from a zone containing a deliberately malformed key that would cause named functioning as ...

7.8CVSS6.8AI score0.33652EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2015/09/03 2:51 a.m.8 views

bind: malformed DNSSEC key failed assertion denial of service

A denial of service flaw was found in the way BIND parsed certain malformed DNSSEC keys. A remote attacker could use this flaw to send a specially crafted DNS query for example, a query requiring a response from a zone containing a deliberately malformed key that would cause named functioning as ...

7.8CVSS6.8AI score0.33652EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2015/07/14 11:0 p.m.48 views

CVE-2015-1762

Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014, when transactional replication is configured, does not prevent use of uninitialized memory in unspecified function calls, which allows remote authenticated users to execute arbitrary code by leveraging certain...

7.8AI score0.10359EPSS
SaveExploits0References2
Check Point Advisories
Check Point Advisories
added 2015/05/18 12:0 a.m.18 views

Microsoft Active Directory LDAP Request Memory Consumption (MS13-032) - Ver2 (CVE-2013-1282)

A denial of service vulnerability exists in the implementations of Active Directory. Successful exploitation could cause the service to stop responding. The vulnerability is caused when the LDAP service fails to handle a specially crafted query. A Remote attacker can exploit this issue via a...

5CVSS6.1AI score0.27005EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2015/05/18 12:0 a.m.10 views

ISC BIND NSEC3-Signed Zones Queries Processing Denial of Service - Ver2 (CVE-2014-0591)

A denial of service vulnerability exists in ISC BIND. The vulnerability is due to a failure to handle queries for NSEC3-signed zones. A remote attacker may exploit this vulnerability by sending a specially crafted query...

2.6CVSS7.1AI score0.31671EPSS
SaveExploits1
OSV
OSV
added 2015/02/12 4:59 p.m.7 views

CVE-2015-1546

Double free vulnerability in the getvrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service crash via a crafted search query with a matched values control...

6.3AI score
SaveExploits0References10
OSV
OSV
added 2015/02/12 4:59 p.m.2 views

DEBIAN-CVE-2015-1546

Double free vulnerability in the getvrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service crash via a crafted search query with a matched values control...

5CVSS6.7AI score0.03413EPSS
SaveExploits0References1
NVD
NVD
added 2014/12/16 11:59 p.m.23 views

CVE-2014-8248

SQL injection vulnerability in CA Release Automation formerly iTKO LISA Release Automation before 4.7.1 b448 allows remote authenticated users to execute arbitrary SQL commands via a crafted query...

6.5CVSS7.8AI score0.01604EPSS
SaveExploits0References5
Prion
Prion
added 2014/12/16 11:59 p.m.24 views

Sql injection

SQL injection vulnerability in CA Release Automation formerly iTKO LISA Release Automation before 4.7.1 b448 allows remote authenticated users to execute arbitrary SQL commands via a crafted query...

6.5CVSS8.4AI score0.01604EPSS
SaveExploits0References5Affected Software1
Check Point Advisories
Check Point Advisories
added 2014/02/25 12:0 a.m.13 views

ISC BIND NSEC3-Signed Zones Queries Processing Denial of Service (CVE-2014-0591)

A denial of service vulnerability exists in ISC BIND. The vulnerability is due to a failure to handle queries for NSEC3-signed zones. A remote attacker may exploit this vulnerability by sending a specially crafted query...

2.6CVSS7.1AI score0.31671EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2014/01/20 5:30 p.m.7 views

bind: named crash when handling malformed NSEC3-signed zones

A denial of service flaw was found in the way BIND handled queries for NSEC3-signed zones. A remote attacker could use this flaw against an authoritative name server that served NCES3-signed zones by sending a specially crafted query, which, when processed, would cause named to crash...

2.6CVSS6.8AI score0.31671EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB
added 2013/09/11 2:3 p.m.8 views

CVE-2013-3868

Microsoft Active Directory Lightweight Directory Service AD LDS on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 8 and Active Directory Services on Windows Server 2008 SP2 and R2 SP1 and Server 2012 allow remote attackers to cause a denial of service LDAP...

5CVSS5.6AI score0.37118EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2013/09/11 12:0 a.m.9 views

PT-2013-4701 · Microsoft · Windows Server 2012 +6

Name of the Vulnerable Software and Affected Versions: Microsoft Active Directory Lightweight Directory Service AD LDS versions on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 8 Active Directory Services versions on Windows Server 2008 SP2 and R2 SP1 and Serve...

5CVSS6.4AI score0.37118EPSS
SaveExploits0References3
OSV
OSV
added 2013/07/31 1:20 p.m.4 views

DEBIAN-CVE-2013-4995

Cross-site scripting XSS vulnerability in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted SQL query that is not properly handled during the display of row information...

3.5CVSS8.2AI score0.01449EPSS
SaveExploits0References1
Rows per page
Query Builder