Lucene search
+L

2041 matches found

Veracode
Veracode
added 2023/09/08 10:29 a.m.14 views

Race Condition

wiremock is vulnerable toa Race Condition. The vulnerability is due to the render function when DNS server's address expire between initial validation and an outbound network request, potentially leading to unintended access to prohibited domains...

6.6CVSS7.1AI score0.00571EPSS
SaveExploits0References3Affected Software4
Redos
Redos
added 2023/09/08 12:0 a.m.42 views

ROS-20230907-03

The vulnerability in the BIND DNS server is related to a stack buffer overflow when BIND is acting as a "resolver" when the number of recursive queries has reached an acceptable maximum and the server settings have been configured. "resolver", when the number of recursive queries has reached an...

7.5CVSS8.8AI score0.03776EPSS
SaveExploits0
NVD
NVD
added 2023/09/06 9:15 p.m.33 views

CVE-2023-41329

WireMock is a tool for mocking HTTP services. The proxy mode of WireMock, can be protected by the network restrictions configuration, as documented in Preventing proxying to and recording from specific target addresses. These restrictions can be configured using the domain names, and in such a ca...

6.6CVSS5.3AI score0.00571EPSS
SaveExploits0References2
Prion
Prion
added 2023/09/06 9:15 p.m.35 views

Race condition

WireMock is a tool for mocking HTTP services. The proxy mode of WireMock, can be protected by the network restrictions configuration, as documented in Preventing proxying to and recording from specific target addresses. These restrictions can be configured using the domain names, and in such a ca...

4.3CVSS6.4AI score0.00571EPSS
SaveExploits0References2Affected Software4
Cvelist
Cvelist
added 2023/09/06 8:34 p.m.32 views

CVE-2023-41329 Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio

WireMock is a tool for mocking HTTP services. The proxy mode of WireMock, can be protected by the network restrictions configuration, as documented in Preventing proxying to and recording from specific target addresses. These restrictions can be configured using the domain names, and in such a ca...

3.9CVSS6.7AI score0.00571EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/06 8:34 p.m.31 views

CVE-2023-41329 Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio

WireMock is a tool for mocking HTTP services. The proxy mode of WireMock, can be protected by the network restrictions configuration, as documented in Preventing proxying to and recording from specific target addresses. These restrictions can be configured using the domain names, and in such a ca...

3.9CVSS6.4AI score0.00571EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2023/09/06 8:34 p.m.17 views

CVE-2023-41329 Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio

WireMock is a tool for mocking HTTP services. The proxy mode of WireMock, can be protected by the network restrictions configuration, as documented in Preventing proxying to and recording from specific target addresses. These restrictions can be configured using the domain names, and in such a ca...

3.9CVSS6.8AI score0.00571EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/08/09 12:0 a.m.26 views

SUSE SLED15: libQt6Concurrent6 / libQt6Core6 / libQt6DBus6 / libQt6Gui6 / etc (SUSE-SU-2023:3225-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3225-1 advisory. - CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a...

7.5CVSS6.7AI score0.0132EPSS
SaveExploits0References16
Rockylinux
Rockylinux
added 2023/08/08 12:34 p.m.34 views

bind security update

An update is available for bind. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Berkeley Internet Name Domain BIND is an implementation of the Domain Name...

7.5CVSS6.8AI score0.03776EPSS
SaveExploits0
OSV
OSV
added 2023/08/08 12:33 p.m.35 views

RLSA-2023:4102 Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

7.5CVSS8AI score0.03776EPSS
SaveExploits0References2
NVD
NVD
added 2023/08/03 3:15 p.m.51 views

CVE-2023-2754

The Cloudflare WARP client for Windows assigns loopback IPv4 addresses for the DNS Servers, since WARP acts as local DNS server that performs DNS queries in a secure manner, however, if a user is connected to WARP over an IPv6-capable network, te WARP client did not assign loopback IPv6 addresses...

7.4CVSS7.3AI score0.00746EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/07/28 12:0 a.m.8 views

The vulnerability of the DNS Server component of the Windows operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6.8CVSS7.3AI score0.00698EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2023/07/20 5:39 a.m.843 views

Exploit for Off-by-one Error in F5 Nginx

CVE-2021-23017...

7.7CVSS7AI score0.53461EPSS
SaveExploits10
OpenVAS
OpenVAS
added 2023/07/19 12:0 a.m.25 views

Ubuntu: Security Advisory (USN-6183-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.1AI score0.03776EPSS
SaveExploits0References2
OSV
OSV
added 2023/07/17 12:0 a.m.37 views

ALSA-2023:4099 Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

7.5CVSS8AI score0.03776EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2023/07/17 12:0 a.m.53 views

Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

7.5CVSS7.7AI score0.03776EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2023/07/12 12:0 a.m.27 views

Microsoft Windows Multiple Vulnerabilities (KB5028240)

This host is missing an important security update according to Microsoft KB5028240 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.8CVSS7.6AI score0.43409EPSS
SaveExploits6References3
OSV
OSV
added 2023/07/11 6:15 p.m.2 views

CVE-2023-35346

Windows DNS Server Remote Code Execution Vulnerability...

6.6CVSS5.9AI score0.00698EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/11 6:15 p.m.19 views

CVE-2023-35346

Windows DNS Server Remote Code Execution Vulnerability...

6.6CVSS8.1AI score0.00698EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/07/11 6:15 p.m.4 views

CVE-2023-35346

Windows DNS Server Remote Code Execution Vulnerability...

6.6CVSS5.8AI score0.00698EPSS
SaveExploits0References2Affected Software14
Rows per page
Query Builder