Lucene search
+L

1172 matches found

SUSE Linux
SUSE Linux
added 2025/02/11 10:35 a.m.0 views

Security update for bind

This update for bind fixes the following issues: CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section bsc1236596 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...

8.7CVSS7.9AI score0.15465EPSS
SaveExploits0References4
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.4 views

Astra Linux – Vulnerability in bind9

It is possible to create a zone such that certain queries to it will generate responses containing numerous records in the Additional section. An attacker sending multiple such queries can cause either the authoritative server or an independent resolver to use excessive resources to process the...

7.5CVSS6.4AI score0.15465EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
added 2025/02/07 1:0 p.m.3 views

Security update for bind

This update for bind fixes the following issues: CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section bsc1236596 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...

8.7CVSS7.8AI score0.15465EPSS
SaveExploits0References4
The Hacker News
The Hacker News
added 2025/02/07 10:32 a.m.18 views

India's RBI Introduces Exclusive "bank.in" Domain to Combat Digital Banking Fraud

India's central bank, the Reserve Bank of India RBI, said it's introducing an exclusive "bank.in" internet domain for banks in the country to combat digital financial fraud. "This initiative aims to reduce cyber security threats and malicious activities like phishing; and, streamline secure...

7.5AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/02/07 12:0 a.m.9 views

PT-2025-5978 · Audiocodes · Audiocodes One Voice Operations Center

Name of the Vulnerable Software and Affected Versions: AudioCodes One Voice Operations Center OVOC versions prior to 8.4.582 Description: A path traversal issue allows sensitive data to be read without any authentication. This means that an attacker could potentially access confidential informati...

7.5CVSS6.9AI score0.00638EPSS
SaveExploits1References7
SUSE Linux
SUSE Linux
added 2025/02/05 9:9 a.m.6 views

Security update for bind

This update for bind fixes the following issues: CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section bsc1236596 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...

8.7CVSS7.9AI score0.15465EPSS
SaveExploits0References4
NVD
NVD
added 2025/02/03 3:15 p.m.10 views

CVE-2025-23614

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in niksudan WordPress Additional Logins wp-additional-logins allows Reflected XSS.This issue affects WordPress Additional Logins: from n/a through = 1.0.0...

7.1CVSS0.00309EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
added 2025/02/03 3:10 p.m.4 views

Security update for bind

This update for bind fixes the following issues: CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section bsc1236596 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...

8.7CVSS7.3AI score0.15465EPSS
SaveExploits0References4
OSV
OSV
added 2025/02/03 3:10 p.m.13 views

SUSE-SU-2025:0337-1 Security update for bind

This update for bind fixes the following issues: - CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section bsc1236596...

7.5CVSS7.4AI score0.15465EPSS
SaveExploits0References3
CVE
CVE
added 2025/02/03 2:22 p.m.47 views

CVE-2025-23614

CVE-2025-23614 is a reflected XSS in WordPress Additional Logins (Nik Sudan) affecting versions prior to 1.0.0. The issue arises from improper input neutralization during web page generation, enabling reflected Cross-Site Scripting. CVSS v3.1 base score 7.1 (HIGH) with NETWORK attack vector, LOW ...

7.1CVSS7.2AI score0.00309EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/03 2:22 p.m.10 views

CVE-2025-23614 WordPress WordPress Additional Logins plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nik Sudan WordPress Additional Logins allows Reflected XSS. This issue affects WordPress Additional Logins: from n/a through 1.0.0...

7.1CVSS6.9AI score0.00309EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/03 2:22 p.m.23 views

CVE-2025-23614 WordPress WordPress Additional Logins plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in niksudan WordPress Additional Logins wp-additional-logins allows Reflected XSS.This issue affects WordPress Additional Logins: from n/a through = 1.0.0...

7.1CVSS0.00309EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/03 12:0 a.m.6 views

PT-2025-4975 · WordPress · Nik Sudan Wordpress Additional Logins

Name of the Vulnerable Software and Affected Versions: Nik Sudan WordPress Additional Logins versions prior to 1.0.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This means that an attacker c...

7.1CVSS9AI score0.00309EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/02/03 12:0 a.m.7 views

WordPress plugin WordPress Additional Logins 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

7.1CVSS7.7AI score0.00309EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/01/30 4:11 a.m.5 views

SUSE CVE-2024-11187

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources...

7.5CVSS8AI score0.15465EPSS
SaveExploits0References15
OSV
OSV
added 2025/01/29 10:15 p.m.12 views

AZL-56097 CVE-2024-11187 affecting package bind for versions less than 9.20.5-1

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources...

7.5CVSS7.2AI score0.15465EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/29 10:15 p.m.6 views

ALPINE-CVE-2024-11187

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources...

7.5CVSS6.9AI score0.15465EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/29 10:15 p.m.18 views

AZL-56198 CVE-2024-11187 affecting package dhcp for versions less than 4.4.3.P1-3

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources...

7.5CVSS6.9AI score0.15465EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/29 10:15 p.m.1 views

DEBIAN-CVE-2024-11187

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources...

7.5CVSS6.4AI score0.15465EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/29 9:40 p.m.5 views

CVE-2024-11187 Many records in the additional section cause CPU exhaustion

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources...

7.5CVSS7.4AI score0.15465EPSS
SaveExploits0References1
Rows per page
Query Builder