5636 matches found
PT-2018-18510
Name of the Vulnerable Software and Affected Versions Microsoft Publisher affected versions not specified Description A remote code execution issue exists due to Microsoft Publisher's failure to properly lock down the Local Machine zone when instantiating OLE objects. This could allow an attacker...
Google Android NVIDIA component elevation of privilege vulnerability (CNVD-2018-12654)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android NVIDIA component NVIDIA Tegra X1 TZ. An attacker can exploit this vulnerability to achieve elevation of...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15881)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setDateAndTime method in Quest DR Series disk backup software versions prior to 4.0.3.1. An attacker can exploit this vulnerability to execute arbitrary system commands by configurin...
Easy File Uploader 1.7 Shell Upload
==================================================================================================================================== | Title : Easy File Uploader 1.7 unrestricted file upload Vulnerability | | Author : indoushka | | Telegram : @indoushka | | Tested on : windows 10 FranASSais V.Pro...
Authorization Bypass
libbind9.so is vulnerable to authorization bypass. A malicious user can trigger a TSIG authentication error to cause an unauthorized DNS zone transfer or other DNS transactions. This vulnerability only applies to DNS servers using bind that have no-address based ACL in place...
May 23, 2018—KB4100403 (OS Build 17134.81)
None None...
ISC BIND Multiple Denial of Service Vulnerabilities (May 2018)
ISC BIND is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind";...
CVE-2018-5736
A flaw was found in the way zone databases were handled by bind. An attacker with permissions to initiate a zone transfer could cause bind to crash...
ISC BIND Denial of Service Vulnerability (CNVD-2018-14416)
ISC BIND is the United States Internet Systems Consortium ISC company maintains a set of open source software that implements the DNS protocol. A denial-of-service vulnerability exists in ISC BIND due to a flaw in the handling of BIND slave zone transfers, which could be exploited by an attacker ...
May 21, 2018—KB4103714 (OS Build 16299.461)
None None...
FreeBSD : BIND -- multiple vulnerabilities (94599fe0-5ca3-11e8-8be1-d05099c0ae8c)
ISC reports : An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone in quick succession. A problem with the implementation of the new serve-stale feature in BIND 9.12 can le...
PT-2018-17119
Name of the Vulnerable Software and Affected Versions: BIND versions 9.12.0 through 9.12.1 Description: An error in zone database reference counting can lead to an assertion failure if a server attempts several transfers of a slave zone in quick succession. This issue could be deliberately...
BIND -- multiple vulnerabilities
ISC reports: An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone in quick succession. A problem with the implementation of the new serve-stale feature in BIND 9.12 can lea...
May 17, 2018—KB4103713 (Preview of Monthly Rollup)
None None...
May 17, 2018—KB4103724 (Preview of Monthly Rollup)
None None...
May 17, 2018—KB4103722 (OS Build 15063.1112)
None None...
Privilege Escalation
CloudFoundry User Account and Authentication UAA is vulnerable to privilege escalation. A zone administrator can issue a token that impersonates another zone, allowing an escalation of privileges during offline validation of clients...
CVE-2018-1262: Undefined Security Weakness
Cloud Foundry Foundation UAA, versions 4.12.X and 4.13.X, introduced a feature which could allow privilege escalation across identity zones for clients performing offline validation. A zone administrator could configure their zone to issue tokens which impersonate another zone, granting up to adm...
Fedora 26 : knot-resolver (2018-0c0671072b)
Knot Resolver 2.3.0 2018-04-23 ================================ Security -------- - fix CVE-2018-1110: denial of service triggered by malformed DNS messages !550, !558, security!2, security!4 - increase resilience against slow lorris attack security!5 Bugfixes -------- - validation: fix SERVFAIL ...