Lucene search
+L

2970 matches found

OpenVAS
OpenVAS
•added 2025/11/10 12:0 a.m.•4 views

Pi-hole Ad-Blocker Detection (DNS)

DNS TCP and UDP based detection of the Pi-hole Ad-Blocker. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7AI score
SaveExploits0
AlmaLinux
AlmaLinux
•added 2025/11/10 12:0 a.m.•8 views

Important: bind9.18 security update

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

8.6CVSS6.8AI score0.11203EPSS
SaveExploits1References8
Fedora
Fedora
•added 2025/11/09 3:12 a.m.•9 views

[SECURITY] Fedora 43 Update: bind-9.18.41-2.fc43

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

7.5CVSS6.9AI score0.11203EPSS
SaveExploits0
Rockylinux
Rockylinux
•added 2025/11/07 9:0 a.m.•5 views

bind security update

An update is available for bind. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Berkeley Internet Name Domain BIND is an implementation of the Domain Name...

8.6CVSS6.8AI score0.00665EPSS
SaveExploits1
EUVD
EUVD
•added 2025/11/07 2:58 a.m.•8 views

EUVD-2025-38234

Manager-io/Manager is accounting software. In Manager Desktop and Server versions 25.11.1.3085 and below, a critical vulnerability permits unauthorized access to internal network resources. The flaw lies in the fundamental design of the DNS validation mechanism. A Time-of-Check Time-of-Use TOCTOU...

10CVSS6.2AI score0.00315EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/07 12:0 a.m.•7 views

Manager-io ä»£ē é—®é¢˜ę¼ę“ž

Manager-io is an open source accounting software from Manager.io. It is available for Windows, Mac and Linux. A code issue vulnerability exists in Manager-io 25.11.1.3085 and prior versions that stems from a TOCTOU condition in the DNS authentication mechanism, which could lead to bypassing netwo...

10CVSS7AI score0.00315EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/11/07 12:0 a.m.•14 views

PT-2025-45400

Name of the Vulnerable Software and Affected Versions Manager-io/Manager versions 25.11.1.3085 and below Description Manager-io/Manager accounting software contains a critical flaw in its DNS validation mechanism. This flaw results in a Time-of-Check Time-of-Use TOCTOU condition, allowing attacke...

10CVSS6.7AI score0.00315EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
•added 2025/11/07 12:0 a.m.•5 views

RHEL 10 : bind (RHSA-2025:19912)

"The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19912 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

8.6CVSS6.6AI score0.11203EPSS
SaveExploits1References8
RedHat Linux
RedHat Linux
•added 2025/11/06 3:50 p.m.•7 views

bind: Cache poisoning attacks with unsolicited RRs

A vulnerability exists in BIND’s DNS resolver logic that makes it overly permissive when accepting resource records RRs in responses. Under certain conditions, this flaw allows attackers to inject unsolicited or forged DNS records into the cache. This can be exploited to poison the resolver cache...

8.6CVSS6AI score0.00665EPSS
SaveExploits1References4
OSV
OSV
•added 2025/11/06 9:1 a.m.•8 views

RLSA-2025:19793 Important: bind9.16 security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

8.6CVSS6.8AI score0.00665EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
•added 2025/11/06 1:58 a.m.•40 views

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

8.6CVSS6.7AI score0.00665EPSS
SaveExploits1References2
NVD
NVD
•added 2025/11/06 12:15 a.m.•6 views

CVE-2025-64163

DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps://. However, omission of protection for the dns:// protocol results in an SSRF vulnerability. This issue is fixed in version 2.10.15...

9.8CVSS0.01054EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/11/06 12:0 a.m.•8 views

DataEase ä»£ē é—®é¢˜ę¼ę“ž

DataEase is an open source data visualization and analysis tool from DataEase Open Source. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. A code issue vulnerability exists in DataEase version 2.10.14 and versions prio...

9.8CVSS6.8AI score0.01054EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/11/05 11:52 p.m.•7 views

EUVD-2025-37958

DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps://. However, omission of protection for the dns:// protocol results in an SSRF vulnerability. This issue is fixed in version 2.10.15...

9.3CVSS6.2AI score0.01054EPSS
SaveExploits1References3
OSV
OSV
•added 2025/11/05 11:52 p.m.•9 views

CVE-2025-64163 DataEase's DB2 is vulnerable to SSRF

DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps://. However, omission of protection for the dns:// protocol results in an SSRF vulnerability. This issue is fixed in version 2.10.15...

9.3CVSS6.7AI score0.01054EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2025/11/05 12:0 a.m.•3 views

RHEL 8 : bind9.16 (RHSA-2025:19793)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19793 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

8.6CVSS6.6AI score0.00665EPSS
SaveExploits1References6
OSV
OSV
•added 2025/11/05 12:0 a.m.•5 views

ALSA-2025:19835 Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

8.6CVSS6.8AI score0.00665EPSS
SaveExploits1References4
OSV
OSV
•added 2025/11/04 2:15 a.m.•8 views

CVE-2025-43376

A logic issue was addressed with improved state management. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26. A remote attacker may be able to view leaked DNS queries with Private Relay turned on...

7.5CVSS5.8AI score0.00747EPSS
SaveExploits0References5
CVE
CVE
•added 2025/11/04 1:16 a.m.•27 views

CVE-2025-43376

CVE-2025-43376 is a logic/state-management issue in WebKit/Safari affecting Apple platforms (Safari 26, WebKit updates across macOS Sonoma/Sequoia, iOS 26, iPadOS 26, tvOS/watchOS). The vulnerability could allow a remote attacker to view leaked DNS queries when Private Relay is enabled. Root caus...

7.5CVSS5.9AI score0.00747EPSS
SaveExploits0References7Affected Software5
Cvelist
Cvelist
•added 2025/11/04 1:16 a.m.•8 views

CVE-2025-43376

A logic issue was addressed with improved state management. This issue is fixed in Safari 26, iOS 18.7.7 and iPadOS 18.7.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A remote attacker may be able to view leaked DNS queries with Private Relay turned on...

0.00747EPSS
SaveExploits0References7
Rows per page
Query Builder