Lucene search
K

8 matches found

EUVD
EUVD
added 2025/11/13 3:23 a.m.2 views

EUVD-2025-175402

Malicious code in zero-epsilon-bash-cache-query npm...

6.6AI score
Exploits0
UbuntuCve
UbuntuCve
added 2024/02/13 2:15 p.m.20 views

CVE-2023-5680

If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance. This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and...

5.3CVSS6.4AI score0.00105EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:57 a.m.1 views

SUSE CVE-2010-3613

named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service daemon crash via a query for...

4CVSS7.4AI score0.03207EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/01/25 9:39 p.m.14 views

CVE-2022-3736 named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries

BIND 9 resolver can crash when stale cache and stale answers are enabled, option stale-answer-client-timeout is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and...

7.5CVSS7.1AI score0.02526EPSS
Exploits0References1
CNVD
CNVD
added 2018/08/01 12:0 a.m.1 views

Red Hat SSSD Information Disclosure Vulnerability

SSSD is a daemon for managing access to remote directories and authentication mechanisms. An information disclosure vulnerability exists in the 'sysdbsearchuserbyupnres' function in Red Hat SSSD versions prior to 1.16.0, which stems from the program failing to filter requests when querying the...

8.8CVSS6.4AI score0.00447EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2017/08/04 12:0 a.m.94 views

IBM WebSphere Application Server 7.0 < 7.0.0.45 / 8.0 < 8.0.0.14 / 8.5 < 8.5.5.13 / 9.0 < 9.0.0.5 Information Disclosure (PI82630)

The version of IBM WebSphere Application Server running on the remote host is 7.0 prior to 7.0.0.45, 8.0 prior to 8.0.0.14, 8.5 prior to 8.5.5.13, or 9.0 prior to 9.0.0.5. It is, therefore, affected by an unspecified information disclosure flaw due to sensitive information being cached insecurely...

3.3CVSS5.6AI score0.00057EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2007/07/24 5:30 p.m.29 views

CVE-2007-2925

The default access control lists ACL in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache...

5.8CVSS6.8AI score0.02207EPSS
Exploits0References1
CVE
CVE
added 2007/07/24 5:0 p.m.89 views

CVE-2007-2925

CVE-2007-2925 affects ISC BIND 9.4.0/9.4.1 and 9.5.0a1–9.5.0a5 where default ACLs do not enable allow-recursion or allow-query-cache, allowing remote recursion against the cache. Upstream fixes exist (e.g., 9.5.0a6, and related patches for 9.4.x/9.5.x lines). Several advisories note the issue and...

5.8CVSS8.4AI score0.02207EPSS
Exploits0References15Affected Software1
Rows per page
Query Builder