Lucene search
+L

987 matches found

NVD
NVD
•added 2026/04/07 9:16 a.m.•15 views

CVE-2026-28810

Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel inetres, inetdb modules allows DNS Cache Poisoning. The built-in DNS resolver inetres uses a sequential, process-global 16-bit transaction ID for UDP queries and does not implement source port randomization...

6.3CVSS0.00406EPSS
SaveExploits0References7
OSV
OSV
•added 2026/04/07 9:16 a.m.•27 views

DEBIAN-CVE-2026-28810

Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel inetres, inetdb modules allows DNS Cache Poisoning. The built-in DNS resolver inetres uses a sequential, process-global 16-bit transaction ID for UDP queries and does not implement source port randomization...

3.7CVSS5.7AI score0.00406EPSS
SaveExploits0References1
OSV
OSV
•added 2026/04/07 9:16 a.m.•21 views

UBUNTU-CVE-2026-28810

Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel inetres, inetdb modules allows DNS Cache Poisoning. The built-in DNS resolver inetres uses a sequential, process-global 16-bit transaction ID for UDP queries and does not implement source port randomization...

6.3CVSS5.7AI score0.00406EPSS
SaveExploits0References10
EUVD
EUVD
•added 2026/04/07 7:50 a.m.•25 views

EUVD-2026-19582

Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel inetres, inetdb modules allows DNS Cache Poisoning. The built-in DNS resolver inetres uses a sequential, process-global 16-bit transaction ID for UDP queries and does not implement source port randomization...

6.3CVSS5.7AI score0.00406EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2026/04/07 7:50 a.m.•25 views

CVE-2026-28810

Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel inetres, inetdb modules allows DNS Cache Poisoning. The built-in DNS resolver inetres uses a sequential, process-global 16-bit transaction ID for UDP queries and does not implement source port randomization...

6.3CVSS5.7AI score0.00406EPSS
SaveExploits0References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/07 12:00 a.m.•4 views

CVE-2026-28810: Generation of Predictable Numbers or Identifiers

Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel inetres, inetdb modules allows DNS Cache Poisoning. The built-in DNS resolver inetres uses a sequential, process-global 16-bit transaction ID for UDP queries and does not implement source port randomization...

6.3CVSS5.7AI score0.00406EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/07 12:00 a.m.•3 views

CVE-2025-71058: Improper Control of Generation of Code

Dual DHCP DNS Server 8.01 improperly accepts and caches UDP DNS responses without validating that the response originates from a legitimate configured upstream DNS server. The implementation matches responses primarily by TXID and inserts results into the cache, enabling a remote attacker to inje...

9.1CVSS5.9AI score0.00451EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/04/07 12:00 a.m.•21 views

CVE-2026-28810

Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel inetres, inetdb modules allows DNS Cache Poisoning. The built-in DNS resolver inetres uses a sequential, process-global 16-bit transaction ID for UDP queries and does not implement source port randomization...

6.3CVSS5.7AI score0.00406EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2026/04/03 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-34513

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory...

7.5CVSS6.1AI score0.00609EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/01 9:19 p.m.•16 views

EUVD-2026-18035

AIOHTTP Affected by Denial of Service DoS via Unbounded DNS Cache in TCPConnector...

6.9CVSS6.2AI score0.00609EPSS
SaveExploits0References3
OSV
OSV
•added 2026/04/01 9:16 p.m.•10 views

AZL-81758 CVE-2026-34513 affecting package python-aiohttp 3.6.2-3

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation. This issue has been patched in version 3.13.4...

7.5CVSS6AI score0.00609EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/01 9:16 p.m.•13 views

CVE-2026-34513

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation. This issue has been patched in version 3.13.4...

7.5CVSS0.00609EPSS
SaveExploits0References3
OSV
OSV
•added 2026/04/01 9:16 p.m.•15 views

UBUNTU-CVE-2026-34513

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation. This issue has been patched in version 3.13.4...

7.5CVSS6AI score0.00609EPSS
SaveExploits0References6
CVE
CVE
•added 2026/04/01 8:06 p.m.•106 views

CVE-2026-34513

CVE-2026-34513 affects aiohttp prior to 3.13.4, where an unbounded DNS cache could cause excessive memory usage leading to a DoS. The issue has been patched in 3.13.4. Affected component: aiohttp (async HTTP client/server for asyncio). Root cause: unbounded DNS cache memory growth. Impact: potent...

7.5CVSS6AI score0.00609EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2026/04/01 8:06 p.m.•10 views

CVE-2026-34513 AIOHTTP: Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation. This issue has been patched in version 3.13.4...

6.9CVSS5.9AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/01 12:00 a.m.•4 views

CVE-2026-34513: Allocation of Resources Without Limits or Throttling

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation. This issue has been patched in version 3.13.4...

7.5CVSS6AI score0.00609EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/27 2:25 p.m.•75 views

CVE-2021-27393

A vulnerability has been identified in Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2013.08, Nucleus Source Code Versions including affected DNS modules. The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS...

5.3CVSS5.8AI score0.00751EPSS
SaveExploits0References1
Schneier on Security
Schneier on Security
•added 2026/03/09 10:57 a.m.•18 views

New Attack Against Wi-Fi

It's called AirSnitch: Unlike previous Wi-Fi attacks, AirSnitch exploits core features in Layers 1 and 2 and the failure to bind and synchronize a client across these and higher layers, other nodes, and other network names such as SSIDs Service Set Identifiers. This cross-layer identity...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/02/22 12:00 a.m.•35 views

PT-2026-29602

Name of the Vulnerable Software and Affected Versions AIOHTTP versions prior to 3.13.4 Description AIOHTTP, an asynchronous HTTP client/server framework, is susceptible to excessive memory usage due to an unbounded DNS cache. This can potentially lead to a Denial of Service DoS situation if an...

7.8CVSS6.1AI score0.00609EPSS
SaveExploits0References372
Tenable Nessus
Tenable Nessus
•added 2026/02/13 12:00 a.m.•21 views

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.0.1.13)

The version of AOS installed on the remote host is prior to 7.0.1.13. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.0.1.13 advisory. - Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forg...

8.6CVSS6.7AI score0.02127EPSS
SaveExploits4References6
Rows per page
Query Builder