CVE-2017-7725

concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "canonical" URL on installation of concrete5 using the "Advanced Options" settings. Remote attackers can make a GET request with any domain name in the Host header; this is stored...

UBUNTU-CVE-2017-3136

A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were...

Multiple Huawei Server Buffer Overflow Vulnerabilities

Huawei Tecal RH1288 V2 and others are servers from Huawei, a Chinese company. A buffer overflow vulnerability exists in a number of Huawei servers, which stems from the program failing to adequately detect the length of copied data when processing DNS server messages. An attacker could exploit th...

Backdoor Vulnerability in S-CMS

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS there is a backdoor vulnerability, the reason for this vulnerability is /conn/function.asp file encrypted sentence can be deformed into a Trojan horse caused by the password is the 32-bit md5 value...

UBUNTU-CVE-2016-10152

The readconfigfile function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the configuration file fails, which allows remote attackers to gain root privileges by poisoning the DNS cache...

DEBIAN-CVE-2016-10152

The readconfigfile function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the configuration file fails, which allows remote attackers to gain root privileges by poisoning the DNS cache...

Microsoft Windows Information Disclosure Vulnerability (CNVD-2017-03748)

Microsoft Windows is a series of operating systems released by Microsoft Corporation.DNS Query is one of the DNS query components. An information disclosure vulnerability exists in DNS Query in Microsoft Windows. A remote attacker can exploit this vulnerability to obtain sensitive information by...

CVE-2017-0057

DNS client in Microsoft Windows 8.1; Windows Server 2012 R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 fails to properly process DNS queries, which allows remote attackers to obtain sensitive information via 1 convincing a workstation user to visit an untrusted...

D-Link DSL-2640B DNS Authentication Bypass Vulnerability

The D-Link DSL-2640B is a router device. An authentication bypass vulnerability exists in the D-Link DSL-2640B DNS, which exists in the web interface and can be exploited by an attacker to bypass authentication for unauthorized access...

CVE-2017-6405

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Hostname-based security is open to DNS spoofing...

D-Link DSL-2730U Cross-Site Request Forgery Vulnerability

The D-link DI-604 is a small router device. The D-Link DSL-2730U C1 IN1.00 device has a cross-site request forgery vulnerability in its implementation that could allow a remote attacker to change the DNS or firewall configuration or arbitrary passwords...

The vulnerability of Google Chrome allows a violator to perform domain substitution.

The vulnerability of Google Chrome relates to the improper processing of Unicode characters. Exploiting this vulnerability allows a malicious actor to perform domain hijacking using IDN homographs in a specially created domain name...

CVE-2017-5015

Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled Unicode glyphs, which allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...

USN-3201-1 bind9 vulnerabilities

It was discovered that Bind incorrectly handled rewriting certain query responses when using both DNS64 and RPZ. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service...

bind: Assertion failure when using DNS64 and RPZ Can Lead to Crash

A denial of service flaw was found in the way BIND handled query responses when both DNS64 and RPZ were used. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure or a null pointer dereference via a specially crafted DNS response...

BusyBox Integer Overflow Vulnerability

BusyBox is a set of applications containing several linux commands and tools maintained by Ukrainian software developer Denis Vlasenko. An integer overflow vulnerability exists in the DHCP client udhcpc in BusyBox versions prior to 1.25.0. A remote attacker can exploit this vulnerability to cause...

Google Android Bionic DNS Denial of Service Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.DNS resolution is performed by C library functions. A denial of service vulnerability exists in Google Android Bionic DNS. A remote attacker could use this vulnerability to cause t...

ISC BIND 9 DNS64 and RPZ Assertion Failure Denial of Service Vulnerability

ISC BIND is the United States Internet Systems Consortium ISC company maintains a set of open source software that implements the DNS protocol. ISC BIND 9 suffers from a DNS64 and RPZ Assertion Failure Denial of Service vulnerability. An attacker can exploit the vulnerability by rewriting the que...

DEBIAN-CVE-2016-2147

Integer overflow in the DHCP client udhcpc in BusyBox before 1.25.0 allows remote attackers to cause a denial of service crash via a malformed RFC1035-encoded domain name, which triggers an out-of-bounds heap write...

Integer overflow

Integer overflow in the DHCP client udhcpc in BusyBox before 1.25.0 allows remote attackers to cause a denial of service crash via a malformed RFC1035-encoded domain name, which triggers an out-of-bounds heap write...