307 matches found
GO-2024-3134 CoreDNS Cache Poisoning via a birthday attack in github.com/coredns/coredns
CoreDNS enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...
DNS Cache Poisoning
github.com/coredns/coredns is vulnerable to DNS Cache Poisoning. The vulnerability is due to manipulation of the DNS caching mechanism through a birthday attack, which allows attackers to achieve DNS cache poisoning by injecting fake responses...
SUSE CVE-2023-30464
CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...
Authentication Bypass by Spoofing
Overview github.com/coredns/coredns/plugin/pkg/proxy is a package that implements a forwarding proxy. It caches an upstream net.Conn for some time, so if the same client returns the upstream's Conn will be precached. Affected versions of this package are vulnerable to Authentication Bypass by...
CoreDNS Cache Poisoning via a birthday attack
CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...
GHSA-H92Q-FGPP-QHRQ CoreDNS Cache Poisoning via a birthday attack
CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...
CVE-2023-30464
CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...
CVE-2023-30464
CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...
CVE-2023-30464
CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...
CVE-2023-30464
CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...
CVE-2023-30464
CVE-2023-30464 affects CoreDNS up to version 1.10.1, where the DNS cache can be poisoned and fake responses injected via a birthday attack. The root cause details are not fully disclosed in the provided documents, but multiple sources consistently describe a CoreDNS DNS cache poisoning vector via...
CVE-2023-30464
CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack...
MAL-2024-7622 Malicious code in sap-birthday (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df8c9e26a14d9264266f8c3e924fb781e39a530c0c3c6f57a87b6b4605a4a4d5 The OpenSSF Package Analysis project identified 'sap-birthday' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in sap-birthday (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df8c9e26a14d9264266f8c3e924fb781e39a530c0c3c6f57a87b6b4605a4a4d5 The OpenSSF Package Analysis project identified 'sap-birthday' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in a1501da-birthday (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Security Bulletin: IBM DevOps Release addresses multiple vulnerabilities.
Summary IBM DevOps Release 7.0.0.2 addresses multiple vulnerabilities. Vulnerability Details CVEID:CVE-2014-3643 DESCRIPTION: Jersey could allow a remote attacker to obtain sensitive information, caused by an XML external entity XXE error when processing XML data by jersey SAX parser. By sending ...
The vulnerability of cloud software for creating and using Nextcloud Server’s data storage system, related to bypassing authentication, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of cloud-based software for creating and using Nextcloud Server storage involves the ability to include or exclude birthdays of any user on the same server in the calendar. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...
CVE-2023-48304 Nextcloud Server vulnerable to attacker enabling/disabling birthday calendar for any user
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and starting in version 22.0.0 and prior to versions 22.2.10.16, 23.0.12.11, 24.0.12.7, 25.0.11, 26.0.6, and 27.1.0...
CVE-2023-48304 Nextcloud Server vulnerable to attacker enabling/disabling birthday calendar for any user
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and starting in version 22.0.0 and prior to versions 22.2.10.16, 23.0.12.11, 24.0.12.7, 25.0.11, 26.0.6, and 27.1.0...
