Lucene search
+L

385 matches found

Tenable Nessus
Tenable Nessus
added 2019/12/04 12:0 a.m.274 views

EulerOS 2.0 SP2 : bind (EulerOS-SA-2019-2453)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - To provide fine-grained controls over the ability to use Dynamic DNS DDNS to update records in a zone, BIND 9 provides a feature called...

6.5CVSS6.3AI score0.40536EPSS
SaveExploits1References5
CNVD
CNVD
added 2019/10/31 12:0 a.m.5 views

Mitsubishi Electric smartRTU and Inea ME-RTU Password Plaintext Storage Vulnerability

Mitsubishi Electric smartRTU is an intelligent Remote Terminal Unit RTU from Mitsubishi Electric, Japan.Inea ME-RTU is an intelligent communication gateway product from Inea, Slovenia. A password plaintext storage vulnerability exists in Mitsubishi Electric smartRTU version 2.02 and earlier and...

9.8CVSS7.2AI score0.01936EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2019/10/28 12:0 a.m.8 views

PT-2019-13871 · Mitsubishi · Me-Rtu

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Europe B.V. ME-RTU devices versions 2.02 and earlier INEA ME-RTU devices versions 3.0 and earlier Description: An issue was discovered that allows an unauthenticated attacker to obtain configured username and password...

9.8CVSS7.2AI score0.01936EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2019/09/09 12:0 a.m.22 views

Fedora Update for kea FEDORA-2019-0811a88d77

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.5AI score0.00796EPSS
SaveExploits0References2
Fedora
Fedora
added 2019/09/08 2:59 a.m.79 views

[SECURITY] Fedora 30 Update: kea-1.5.0-9.fc30

DHCP implementation from Internet Systems Consortium, Inc. that features fu lly functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renew al, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers...

6.5CVSS6.5AI score0.00797EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/04/18 12:0 a.m.31 views

Amazon Linux 2 : bind (ALAS-2019-1187)

To provide fine-grained controls over the ability to use Dynamic DNS DDNS to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update...

6.5CVSS6.8AI score0.03479EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/04/10 12:0 a.m.26 views

Amazon Linux AMI : bind (ALAS-2019-1187)

To provide fine-grained controls over the ability to use Dynamic DNS DDNS to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update...

6.5CVSS6.8AI score0.03479EPSS
SaveExploits0References2
Amazon
Amazon
added 2019/04/04 12:0 a.m.93 views

Medium: bind

Issue Overview: To provide fine-grained controls over the ability to use Dynamic DNS DDNS to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when...

6.5CVSS7.1AI score0.03479EPSS
SaveExploits0
NVD
NVD
added 2019/01/16 8:29 p.m.22 views

CVE-2018-5741

To provide fine-grained controls over the ability to use Dynamic DNS DDNS to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update...

6.5CVSS6.6AI score0.03479EPSS
SaveExploits0References9
OSV
OSV
added 2019/01/16 8:29 p.m.22 views

CVE-2018-5741

To provide fine-grained controls over the ability to use Dynamic DNS DDNS to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update...

6.5CVSS6.5AI score0.03479EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2019/01/16 8:29 p.m.21 views

CVE-2018-5741

To provide fine-grained controls over the ability to use Dynamic DNS DDNS to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update...

6.5CVSS6.8AI score0.03479EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2019/01/16 8:0 p.m.53 views

CVE-2018-5741

To provide fine-grained controls over the ability to use Dynamic DNS DDNS to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update...

6.5CVSS6.8AI score0.03479EPSS
SaveExploits0
CVE
CVE
added 2019/01/16 8:0 p.m.762 views

CVE-2018-5741

CVE-2018-5741 concerns ISC BIND 9 and its update-policy feature for Dynamic DNS (DDNS). The issue stems from incorrect documentation of krb5-subdomain and ms-subdomain rule types in the Administrator Reference Manual, which could lead operators to believe their configured policies are more restri...

6.5CVSS6.6AI score0.03479EPSS
SaveExploits0References9Affected Software1
Debian CVE
Debian CVE
added 2019/01/16 8:0 p.m.41 views

CVE-2018-5741

To provide fine-grained controls over the ability to use Dynamic DNS DDNS to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update...

6.5CVSS6.8AI score0.03479EPSS
SaveExploits0
Cvelist
Cvelist
added 2019/01/16 8:0 p.m.30 views

CVE-2018-5741 Update policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentation

To provide fine-grained controls over the ability to use Dynamic DNS DDNS to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update...

6.5CVSS6.6AI score0.03479EPSS
SaveExploits0References9
OSV
OSV
added 2018/12/14 8:29 p.m.4 views

CVE-2018-19007

In Geutebrueck GmbH E2 Camera Series versions prior to 1.12.0.25 the DDNS configuration in the Network Configuration panel is vulnerable to an OS system command injection as root...

9.8CVSS5.8AI score0.03882EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/09/20 12:0 a.m.5 views

ISC BIND 9 krb5-subdomain and ms-subdomain update policy vulnerability

ISC BIND is the United States Internet Systems Consortium ISC company maintains a set of open source software that implements the DNS protocol. To provide fine-grained control over the ability to update records in a zone using Dynamic DNS DDNS, BIND provides a feature called update-policy. Variou...

6.5CVSS6.9AI score0.03479EPSS
SaveExploits0References1
OSV
OSV
added 2018/09/17 8:29 p.m.8 views

CVE-2017-2856

An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue...

8.1CVSS6AI score0.0166EPSS
SaveExploits2References1
OSV
OSV
added 2018/09/17 8:29 p.m.18 views

CVE-2017-2857

An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue...

8.1CVSS6AI score0.0166EPSS
SaveExploits2References1
exploitpack
exploitpack
added 2018/09/17 12:0 a.m.18 views

Netis ADSL Router DL4322D RTK 2.1.1 - Cross-Site Scripting

Netis ADSL Router DL4322D RTK 2.1.1 - Cross-Site Scripting Exploit Title: Netis ADSL Router DL4322D RTK 2.1.1 - Cross-Site Scripting Author: Cakes Discovery Date: 2018-09-16 Vendor Homepage: http://www.netis-systems.com Software Link: http://www.netis-systems.com/Home/detail/id/74.html Tested...

6.8AI score
SaveExploits0
Rows per page
Query Builder