ISC BIND Denial of Service Vulnerability (CNVD-2016-05171)

ISC BIND is the United States Internet Systems Consortium ISC company maintains a set of open source software that implements the DNS protocol. A security vulnerability exists in ISC BIND. When the program is enabled with the lwresd or named lwres option, a remote attacker can cause a denial of...

nginx: invalid pointer dereference in resolver

It was discovered that nginx could perform an out of bound read and dereference an invalid pointer when resolving CNAME DNS records. An attacker able to manipulate DNS responses received by nginx could use this flaw to cause a worker process to crash if nginx enabled the resolver in its...

nginx: use-after-free during CNAME response processing in resolver

A use-after-free flaw was found in the way nginx resolved certain CNAME DNS records. An attacker able to manipulate DNS responses received by nginx could use this flaw to cause a worker process to crash or, possibly, execute arbitrary code if nginx enabled the resolver in its configuration...

Knot DNS Denial of Service Vulnerability

Knot DNS is a high-performance DNS server developed by the Czech Network Information Center CZ.NIC that supports all the key features of the DNS system, such as zone switching, dynamic updates and DNS Security Extensions DNSSEC. A denial of service vulnerability exists in the Knot DNS server that...

ISC BIND Denial of Service Vulnerability (CNVD-2016-04609)

ISC BIND is the United States Internet Systems Consortium ISC company maintains a set of open source software that implements the DNS protocol. A denial of service vulnerability exists in ISC BIND version 9.10.4-P1. A remote attacker could use this vulnerability to cause a denial of service...

The vulnerability of the Firefox browser, which allows a remote attacker to bypass security restrictions

The vulnerability of Firefox lies in the ability to install extensions for lightweight themes without using an HTTPS connection. Exploiting this vulnerability allows a malicious individual to bypass user authentication by using a specially crafted website and by replacing the DNS request for...

Vulnerability of PHP software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information

Overloading of buffers in dynamic memory in the phpparserr function in ext/standard/dns.c in PHP allows remote servers to trigger a failure in service abrupt termination of operations and execute arbitrary code, using specially crafted TXT records in DNS. This vulnerability is related to the...

Vulnerability of PHP software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information

Multiple buffer overflows in the phpparserr function in ext/standard/dns.c in PHP allow removed DNS servers to trigger a failure in service abrupt termination of an application or execute arbitrary code using specially crafted DNS records. This vulnerability is related to the functions dnsgetreco...

The vulnerability of Samba software allows a remote attacker to compromise the accessibility of protected information.

The vulnerability exists in the internal Samba DNS server due to the lack of checking the QR field in the header of the incoming DNS request before sending the response. Exploiting this vulnerability allows malicious actors to cause service failures excessive CPU usage and reduced bandwidth...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a “disconnection”

Cisco IOS software contains a vulnerability in the intrusion detection service, which allows a malicious attacker to induce a “service failure” by manipulating DNS packets...

The vulnerability of the Cisco IOS operating system, which allows a remote attacker to trigger a service failure

A bug in the Application Layer Gateway ALG module of the Cisco IOS operating system allows a remote attacker to reboot the device by using a specially crafted DNS packet with NAT enabled...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the DNS Server component of the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted requests...

OracleVM 3.2 : dhcp (OVMSA-2016-0058)

The remote OracleVM system is missing necessary patches to address critical security updates : - exit2 after sending DHCPDECLINE when dhclient has been started with '-1' RHBZ 756490 - An error in the handling of malformed client identifiers can cause a denial-of-service condition in affected...

Apple AirPort Base Station Memory Corruption Vulnerability

The Apple AirPort Base Station is a Wi-Fi base station product from Apple USA. The product supports streaming music and wireless printing, among other things. A memory corruption vulnerability exists in Apple AirPort Base Station versions prior to 7.6.7 and prior to 7.7.7, which stems from the...

CVE-2016-3227

Use-after-free vulnerability in the DNS Server component in Microsoft Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests, aka "Windows DNS Server Use After Free Vulnerability."...

Command Execution Vulnerability in Kingsoft RealEase Intelligent DNS Management System

Kingsoft RealEase Intelligent DNS Management System is a set of intelligent domain name management system for domain name management enterprises, IDCs and operators. A command execution vulnerability exists in the Kingsoft RealEase Intelligent DNS Management System, which allows attackers to...

Microsoft Windows DNS Server Memory Misreference Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A memory misreference vulnerability exists in the Microsoft Windows DNS server, which arises from a failure of the program to properly process a request. An attacker is allowed to exploit the...

Leaked DNS Query Detection - ISATAP Request (IPv6)

Binary data 7203.pasl...

domainnamelookup.us XSS vulnerability

Vulnerable URL: http://www.domainnamelookup.us/utils/UnSubscribeMe.bml?Name=JUSTXSSS=EstrellaWarBirdsNews=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

The vulnerability of Google Chrome browser allows a violator to circumvent existing restrictions on domain names.

The vulnerability of the Google Chrome browser’s download process is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing restrictions on the directory name...