Lucene search
K

1139 matches found

Github Security Blog
Github Security Blog
added 2025/02/24 9:31 p.m.20 views

Moodle allows reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

8.3CVSS6.1AI score0.00333EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2025/02/24 8:15 p.m.19 views

CVE-2025-26529

Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk...

8.3CVSS0.00478EPSS
Exploits1References2
OSV
OSV
added 2025/02/24 8:15 p.m.3 views

UBUNTU-CVE-2025-26532

Additional checks were required to ensure trusttext is applied when enabled to glossary entries being restored...

4.3CVSS5.8AI score0.00243EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/02/24 7:56 p.m.11 views

CVE-2025-26530 Reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

8.3CVSS0.00333EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/02/24 7:52 p.m.24 views

CVE-2025-26529 Stored XSS risk in admin live log

Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk...

8.3CVSS5.7AI score0.00478EPSS
Exploits1References2
OSV
OSV
added 2025/02/21 1:37 p.m.2 views

OESA-2025-1172 bind security update

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

7.5CVSS6.9AI score0.14257EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2025/02/20 9:42 a.m.3 views

bind: bind9: Many records in the additional section cause CPU exhaustion

A flaw was found in the bind package where a crafted DNS zone may generate numerous records in the 'Additional' section of the response. This flaw allows an attacker to send a large amount of such queries, which may lead either the authoritative server or an independent resolver to run into an...

7.5CVSS7.3AI score0.14257EPSS
Exploits0References5
Oracle linux
Oracle linux
added 2025/02/20 12:0 a.m.103 views

bind security update

32:9.16.23-24.0.1.el95.3 - Fix bind: bind9: Many records in the additional section cause CPU exhaustion CVE-2024-11187...

7.5CVSS7.5AI score0.14257EPSS
Exploits0
Oracle linux
Oracle linux
added 2025/02/20 12:0 a.m.95 views

bind security update

32:9.11.36-16.4 - Change patches applying to use -P parameter 32:9.11.36-16.3 - Limit additional section records CPU processing CVE-2024-11187 - Correct ANY queries to not have additional data appended...

7.5CVSS7.4AI score0.14257EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2025/02/20 12:0 a.m.2 views

Many records in the additional section cause CPU exhaustion

...

7.5CVSS7.2AI score0.14257EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2025/02/19 6:37 p.m.2 views

bind: bind9: Many records in the additional section cause CPU exhaustion

A flaw was found in the bind package where a crafted DNS zone may generate numerous records in the 'Additional' section of the response. This flaw allows an attacker to send a large amount of such queries, which may lead either the authoritative server or an independent resolver to run into an...

7.5CVSS7.3AI score0.14257EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/02/19 5:59 p.m.3 views

bind: bind9: Many records in the additional section cause CPU exhaustion

A flaw was found in the bind package where a crafted DNS zone may generate numerous records in the 'Additional' section of the response. This flaw allows an attacker to send a large amount of such queries, which may lead either the authoritative server or an independent resolver to run into an...

7.5CVSS7.3AI score0.14257EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/02/19 5:31 p.m.4 views

bind: bind9: Many records in the additional section cause CPU exhaustion

A flaw was found in the bind package where a crafted DNS zone may generate numerous records in the 'Additional' section of the response. This flaw allows an attacker to send a large amount of such queries, which may lead either the authoritative server or an independent resolver to run into an...

7.5CVSS7.3AI score0.14257EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/02/19 4:3 p.m.2 views

bind: bind9: Many records in the additional section cause CPU exhaustion

A flaw was found in the bind package where a crafted DNS zone may generate numerous records in the 'Additional' section of the response. This flaw allows an attacker to send a large amount of such queries, which may lead either the authoritative server or an independent resolver to run into an...

7.5CVSS7.3AI score0.14257EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/02/19 2:48 p.m.20 views

bind: bind9: Many records in the additional section cause CPU exhaustion

A flaw was found in the bind package where a crafted DNS zone may generate numerous records in the 'Additional' section of the response. This flaw allows an attacker to send a large amount of such queries, which may lead either the authoritative server or an independent resolver to run into an...

7.5CVSS7.3AI score0.14257EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/02/19 2:26 p.m.6 views

bind: bind9: Many records in the additional section cause CPU exhaustion

A flaw was found in the bind package where a crafted DNS zone may generate numerous records in the 'Additional' section of the response. This flaw allows an attacker to send a large amount of such queries, which may lead either the authoritative server or an independent resolver to run into an...

7.5CVSS7.3AI score0.14257EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/02/19 2:24 p.m.11 views

bind: bind9: Many records in the additional section cause CPU exhaustion

A flaw was found in the bind package where a crafted DNS zone may generate numerous records in the 'Additional' section of the response. This flaw allows an attacker to send a large amount of such queries, which may lead either the authoritative server or an independent resolver to run into an...

7.5CVSS7.3AI score0.14257EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/02/19 1:50 p.m.3 views

bind: bind9: Many records in the additional section cause CPU exhaustion

A flaw was found in the bind package where a crafted DNS zone may generate numerous records in the 'Additional' section of the response. This flaw allows an attacker to send a large amount of such queries, which may lead either the authoritative server or an independent resolver to run into an...

7.5CVSS7.3AI score0.14257EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/02/19 1:31 p.m.4 views

bind: bind9: Many records in the additional section cause CPU exhaustion

A flaw was found in the bind package where a crafted DNS zone may generate numerous records in the 'Additional' section of the response. This flaw allows an attacker to send a large amount of such queries, which may lead either the authoritative server or an independent resolver to run into an...

7.5CVSS7.3AI score0.14257EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/02/19 1:31 p.m.10 views

bind: bind9: Many records in the additional section cause CPU exhaustion

A flaw was found in the bind package where a crafted DNS zone may generate numerous records in the 'Additional' section of the response. This flaw allows an attacker to send a large amount of such queries, which may lead either the authoritative server or an independent resolver to run into an...

7.5CVSS7.3AI score0.14257EPSS
Exploits0References5
Rows per page
Query Builder