Lucene search
+L

341 matches found

OpenVAS
OpenVAS
added 2025/05/19 12:00 a.m.6 views

Huawei EulerOS: Security Advisory for python-dns (EulerOS-SA-2025-1495)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS7.1AI score0.01857EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2025/05/19 12:00 a.m.4 views

Huawei EulerOS: Security Advisory for python-dns (EulerOS-SA-2025-1218)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS7.2AI score0.01857EPSS
SaveExploits1References2
Ubuntu
Ubuntu
added 2025/05/05 11:49 a.m.16 views

USN-7477-1: c-ares vulnerability

It was discovered that c-ares incorrectly handled re-enqueuing certain queries. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service...

8.3CVSS6.8AI score0.00577EPSS
SaveExploits0
Fedora
Fedora
added 2025/04/24 3:29 a.m.19 views

[SECURITY] Fedora 40 Update: c-ares-1.34.5-1.fc40

c-ares is a C library that performs DNS requests and name resolves asynchronously. c-ares is a fork of the library named 'ares', written by Greg Hudson at MIT...

8.3CVSS7.3AI score0.00577EPSS
SaveExploits0
Veracode
Veracode
added 2025/04/03 3:04 a.m.46 views

Denial Of Service (DoS)

OpenDaylight Service Function Chaining SFC is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of name resolution or references and allows an attacker to exploit incorrect resolutions to cause a Denial of Service DoS...

7.5CVSS7.6AI score0.00386EPSS
SaveExploits0References3Affected Software2
PyPA
PyPA
added 2025/03/31 5:15 p.m.19 views

PYSEC-2025-48

Mobile Security Framework MobSF is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. The mitigation for CVE-2024-29190 in validhost uses socket.gethostbyname, which is vulnerable to SSRF abuse using DNS rebinding technique. This...

9.8CVSS6.9AI score0.00718EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
added 2025/03/24 12:00 a.m.21 views

CVE-2025-29313

Use of incorrectly resolved name or reference in OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allows attackers to cause a Denial of Service DoS...

0.00386EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/24 12:00 a.m.11 views

OpenDaylight(ODL) 安全漏洞

OpenDaylight ODL is an open source SDN controller from OpenDaylight Open Source. A security vulnerability exists in OpenDaylight ODL Sodium-SR4 and earlier versions, which stems from a name or reference resolution error that could lead to a denial of service...

7.5CVSS6.3AI score0.00386EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/03/20 6:48 p.m.2 views

Use of Incorrectly-Resolved Name or Reference

Overview Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference when parsing URIs in ProcessURI. An attacker can bypass security rules by sending URIs that starting with //. which lead to an incorrect setting of the REQUESTFILENAME. PoC go package main...

6.3CVSS6.8AI score0.00307EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2025/02/06 3:48 a.m.5 views

SUSE CVE-2025-0665

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

6.5CVSS7AI score0.01275EPSS
SaveExploits1References5
OSV
OSV
added 2025/02/05 10:15 a.m.1 views

DEBIAN-CVE-2025-0665

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

7CVSS8.2AI score0.01275EPSS
SaveExploits1References1
OSV
OSV
added 2025/02/05 10:15 a.m.5 views

ALPINE-CVE-2025-0665

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

7CVSS7AI score0.01275EPSS
SaveExploits1References1
OSV
OSV
added 2025/02/05 8:00 a.m.16 views

CURL-CVE-2025-0665 eventfd double close

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

7CVSS7.1AI score0.01275EPSS
SaveExploits1
curl security advisories
curl security advisories
added 2025/02/05 8:00 a.m.16 views

eventfd double close

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

7CVSS8AI score0.01275EPSS
SaveExploits1References1Affected Software2
CNNVD
CNNVD
added 2025/02/05 12:00 a.m.6 views

curl 安全漏洞

curl is a cURL open source tool for transferring data from or to a server. A security vulnerability exists in curl versions 7.10.5 through 8.11.1 that stems from incorrectly closing the same eventfd file descriptor twice when closing the connection channel after completing threaded name resolutio...

9.8CVSS8.4AI score0.01275EPSS
SaveExploits1References6
OSV
OSV
added 2025/02/05 12:00 a.m.7 views

UBUNTU-CVE-2025-0665

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

9.8CVSS7.1AI score0.01275EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2025/01/14 12:00 a.m.4 views

Huawei EulerOS: Security Advisory for python-dns (EulerOS-SA-2025-1028)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS7AI score0.01857EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/01/13 12:00 a.m.16 views

EulerOS 2.0 SP10 : python-dns (EulerOS-SA-2025-1011)

According to the versions of the python-dns package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an...

7CVSS7.1AI score0.01857EPSS
SaveExploits1References2
Redos
Redos
added 2025/01/10 12:00 a.m.7 views

ROS-20250110-07

A vulnerability in the DNS server responsible for coredns name resolution is related to an incorrect implementation of the of caching. Exploitation of the vulnerability could allow a remote attacker to execute a spoofing attack. spoofing attack...

5.3CVSS7.1AI score0.0076EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2024/11/21 7:24 p.m.22 views

org.keycloak/keycloak-quarkus-server: Keycloak proxy header handling Denial-of-Service (DoS) vulnerability

A vulnerability was found in the Keycloak Server. The Keycloak Server is vulnerable to a denial of service DoS attack due to improper handling of proxy headers. When Keycloak is configured to accept incoming proxy headers, it may accept non-IP values, such as obfuscated identifiers, without prope...

4.7CVSS5.8AI score0.00399EPSS
SaveExploits0References4
Rows per page
Query Builder