Lucene search
+L

229 matches found

NVD
NVD
added 2024/04/25 10:15 a.m.16 views

CVE-2024-25583

A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected...

7.5CVSS7.3AI score0.00832EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/04/25 9:45 a.m.42 views

CVE-2024-25583 Crafted responses can lead to a denial of service in Recursor if recursive forwarding is configured

A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected...

7.5CVSS7.5AI score0.00832EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2024/04/25 9:45 a.m.82 views

CVE-2024-25583

A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected...

7.5CVSS7.3AI score0.00832EPSS
SaveExploits0
CVE
CVE
added 2024/04/25 9:45 a.m.111 views

CVE-2024-25583

CVE-2024-25583 affects the PDNS Recursor (pdns-recursor). A crafted response from an upstream server that the recursor is configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration does not use recursive forwarding and is not affected; however, when ...

7.5CVSS7.2AI score0.00832EPSS
SaveExploits0References2
NVD
NVD
added 2023/10/18 8:15 p.m.27 views

CVE-2023-4601

A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execution. Successful exploitation requires that an attacker can provide a specially crafted response. This affects NI System Configuration 2023 Q3 and a...

9.8CVSS8.7AI score0.00623EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/18 8:15 p.m.6 views

CVE-2023-4601

A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execution. Successful exploitation requires that an attacker can provide a specially crafted response. This affects NI System Configuration 2023 Q3 and a...

9.8CVSS6.3AI score0.00623EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/18 8:15 p.m.23 views

Stack overflow

A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execution. Successful exploitation requires that an attacker can provide a specially crafted response. This affects NI System Configuration 2023 Q3 and a...

7.5CVSS9.4AI score0.00623EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/18 7:15 p.m.45 views

CVE-2023-4601 Stack-based Buffer Overflow in NI System Configuration Software

A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execution. Successful exploitation requires that an attacker can provide a specially crafted response. This affects NI System Configuration 2023 Q3 and a...

8.1CVSS9.7AI score0.00623EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/08/28 12:00 a.m.9 views

Sliver 加密问题漏洞

Sliver is Bishop Fox open source an open source cross-platform adversary simulation / red team framework. It can be used by organizations of all sizes to perform security testing. A security vulnerability exists in Sliver v1.5.x version v1.5.39 that stems from having an incorrect cryptographic...

8.1CVSS7.6AI score0.00588EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 6:00 a.m.9 views

SUSE CVE-2010-0179

Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute...

5.1CVSS7.2AI score0.03275EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 5:56 a.m.7 views

SUSE CVE-2010-3773

Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute...

6.8CVSS7.2AI score0.03083EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:42 a.m.7 views

SUSE CVE-2012-6699

The decodesearch function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service out-of-bounds read via a crafted response...

7.5CVSS6.8AI score0.01967EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:35 a.m.14 views

SUSE CVE-2013-4758

Double free vulnerability in the writeDataError function in the ElasticSearch plugin omelasticsearch in rsyslog before 7.4.2 and before 7.5.2 devel, when errorfile is set to local logging, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted...

6.8CVSS7.5AI score0.0233EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:57 a.m.11 views

SUSE CVE-2016-7947

Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response...

9.8CVSS9.2AI score0.03629EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2023/02/15 4:31 a.m.8 views

SUSE CVE-2018-5732

Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server or an entity masquerading as a server to cause a buffer overflow and resulting crash in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions...

7.5CVSS7.3AI score0.05244EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 4:11 a.m.8 views

SUSE CVE-2019-13114

http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service crash due to a NULL pointer dereference by returning a crafted response that lacks a space character...

6.5CVSS6.7AI score0.02132EPSS
SaveExploits1References5
NVD
NVD
added 2022/07/08 4:15 p.m.23 views

CVE-2022-35406

A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interpreted as a redirect...

4.3CVSS0.00694EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/08 4:15 p.m.4 views

CVE-2022-35406

A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interpreted as a redirect...

4.3CVSS5.8AI score0.00694EPSS
SaveExploits0References2
CVE
CVE
added 2022/07/08 3:33 p.m.87 views

CVE-2022-35406

Burp Suite (PortSwigger) prior to 2022.6 is affected by a URL disclosure issue where viewing a crafted response in Repeater or Intruder could be interpreted as a redirect, potentially exposing the referrer. Root cause involves incorrect handling of crafted responses leading to unexpected redirect...

4.3CVSS4.5AI score0.00694EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2022/07/01 5:01 p.m.25 views

CVE-2022-1954

A Regular Expression Denial of Service vulnerability in GitLab CE/EE affecting all versions from 1.0.2 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker to make a GitLab instance inaccessible via specially crafted web server response headers...

4.3CVSS4.9AI score
SaveExploits0References5
Rows per page
Query Builder