5974 matches found
HCC Embedded InterNiche 安全特征问题漏洞
HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche that stems from a DNS client not setting enough random transaction ids in the DNSv4 component.An attacker can exploit this vulnerability to pass specially crafted inputs to the application...
HCC Embedded InterNiche 缓冲区错误漏洞
HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche that originates from a boundary condition in the DNSv4 component. An attacker can exploit the vulnerability to trigger an out-of-bounds read error and cause a denial of service on the syst...
HCC Embedded InterNiche 安全特征问题漏洞
HCC Embedded InterNiche is a newsletter software. An unspecified vulnerability exists in HCC Embedded InterNiche, which can be exploited to allow an attacker to be able to predict the source port of a DNS query, and then send spoofed DNS response packets that may be accepted as valid answers...
CVE-2021-21565
Dell PowerScale OneFS versions 9.1.0.3 and earlier contain a denial of service vulnerability. SmartConnect had an error condition that may be triggered to loop, using CPU and potentially preventing other SmartConnect DNS responses...
CVE-2021-33195
Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection e.g., XSS that does not conform to the RFC1035 format...
UBUNTU-CVE-2021-33195
Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection e.g., XSS that does not conform to the RFC1035 format...
Dell Technologies Dell PowerScale OneFS 资源管理错误漏洞
Dell PowerScale OneFS is the PowerScale OneFS operating system that provides horizontal scaling NAS. A security vulnerability exists in Dell PowerScale OneFS, which can be exploited by remote attackers to prevent SmartConnect DNS responses...
Cross site request forgery (csrf)
Zoho ManageEngine Password Manager Pro before 11.2 11200 allows login/AjaxResponse.jsp?RequestType=GetUserDomainName&userName= username enumeration, because the response to a failed login request is null only when the username is invalid...
libuv: out-of-bounds read in uv__idna_toascii() can lead to information disclosures or crashes
A flaw has been found in libuv. Node.js is vulnerable to out-of-bounds read in libuv's uvidnatoascii function which is used to convert strings to ASCII which is called by Node's DNS module's lookup function and can lead to information disclosures or crashes. The highest threat from this...
libuv: out-of-bounds read in uv__idna_toascii() can lead to information disclosures or crashes
A flaw has been found in libuv. Node.js is vulnerable to out-of-bounds read in libuv's uvidnatoascii function which is used to convert strings to ASCII which is called by Node's DNS module's lookup function and can lead to information disclosures or crashes. The highest threat from this...
Omnibox address bar bypass security restrictions
The vulnerability of the Omnibox address bar in Google Chrome is related to security mechanisms’ flaws. Exploiting this vulnerability allows a malicious actor to bypass security restrictions by using a specially created domain name...
CVE-2021-34442
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2021-34442
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2021-34525
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2021-34499
Windows DNS Server Denial of Service Vulnerability...
CVE-2021-33780
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2021-33756
Windows DNS Snap-in Remote Code Execution Vulnerability...
CVE-2021-33754
Windows DNS Server Remote Code Execution Vulnerability...