22 matches found
EUVD-2026-87477
OpenClaw npm package 'openclaw' before 2026.8.1 contains a server-side request forgery vulnerability in its trusted-host DNS checks. For fetches that use the trusted-host DNS recheck, a trusted hostname that resolves to an unspecified address 0.0.0.0 or :: bypasses the SSRF destination validation...
netty-resolver-dns-check
netty-resolver-dns-check io.netty:netty-resolver-dns における3件のDNSキャッシュポイズニングCVE — CVE-2026-45674 、CVE-2026-47691 、CVE-2026-45673 — のオフラインチェッカーであり、 バージョン番号では答えられない疑問、あなたのアプリケーションは実際にそのリゾルバを使用しているのか? に答えるためのツールです。 Spring WebClient を使用している場合、答えはほぼ間違いなく「はい」です。たとえ pom.xml に netty-resolver-dns...
CVE-2026-49860 Deno: WebSocket API sandbox bypass via missing post-DNS check
Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, when a WebSocket connection was opened, Deno checked the destination hostname against --deny-net rules but did not re-check the IP addresses that hostname resolved to. An attacker-controlled script could use a specially...
GHSA-83PC-3RW9-QPWJ Deno: WebSocket API sandbox bypass via missing post-DNS check
Summary When a WebSocket connection was opened, Deno checked the destination hostname against --deny-net rules but did not re-check the IP addresses that hostname resolved to. An attacker-controlled script could use a specially crafted domain name that passes the hostname check yet resolves to a...
EUVD-2019-5618
Malware in sbrugna...
Exploit for CVE-2023-4634
CVE-2023-4634 RCE Exploit for Wordpress Plugin Media-Library P...
SUSE: Security Advisory (SUSE-SU-2019:0580-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2019:0581-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : ovmf (openSUSE-2019-1083)
This update for ovmf fixes the following issues : Security issues fixed : - CVE-2018-12180: Fixed a buffer overflow in BlockIo service, which could lead to memory read/write overrun bsc1127820. - CVE-2018-12178: Fixed an improper DNS check upon receiving a new DNS packet bsc1127821. -...
OPENSUSE-SU-2019:1083-1 Security update for ovmf
This update for ovmf fixes the following issues: Security issues fixed: - CVE-2018-12180: Fixed a buffer overflow in BlockIo service, which could lead to memory read/write overrun bsc1127820. - CVE-2018-12178: Fixed an improper DNS check upon receiving a new DNS packet bsc1127821. - CVE-2018-3630...
Security update for ovmf (important)
openSUSE Security Update: Security update for ovmf Announcement ID: openSUSE-SU-2019:1083-1 Rating: important References: 1127820 1127821 1127822 Cross-References: CVE-2018-12178 CVE-2018-12180 CVE-2018-3630 Affected Products: openSUSE Leap 15.0 An update that fixes three vulnerabilities is now...
openSUSE: Security Advisory for ovmf (openSUSE-SU-2019:0348-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : ovmf (openSUSE-2019-348)
This update for ovmf fixes the following issues : Security issues fixed : - CVE-2018-12180: Fixed a buffer overflow in BlockIo service, which could lead to memory read/write overrun bsc1127820. - CVE-2018-12178: Fixed an improper DNS check upon receiving a new DNS packet bsc1127821. -...
Security update for ovmf (important)
openSUSE Security Update: Security update for ovmf Announcement ID: openSUSE-SU-2019:0348-1 Rating: important References: 1127820 1127821 1127822 Cross-References: CVE-2018-12178 CVE-2018-12180 CVE-2018-3630 Affected Products: openSUSE Leap 42.3 An update that fixes three vulnerabilities is now...
SUSE SLES12 Security Update : ovmf (SUSE-SU-2019:0579-1)
This update for ovmf fixes the following issues : Security issues fixed : CVE-2018-12180: Fixed a buffer overflow in BlockIo service, which could lead to memory read/write overrun bsc1127820. CVE-2018-12178: Fixed an improper DNS check upon receiving a new DNS packet bsc1127821. CVE-2018-3630:...
SUSE SLES15 Security Update : ovmf (SUSE-SU-2019:0580-1)
This update for ovmf fixes the following issues : Security issues fixed : CVE-2018-12180: Fixed a buffer overflow in BlockIo service, which could lead to memory read/write overrun bsc1127820. CVE-2018-12178: Fixed an improper DNS check upon receiving a new DNS packet bsc1127821. CVE-2018-3630:...
SUSE SLES12 Security Update : ovmf (SUSE-SU-2019:0581-1)
This update for ovmf fixes the following issues : Security issues fixed : CVE-2018-12180: Fixed a buffer overflow in BlockIo service, which could lead to memory read/write overrun bsc1127820. CVE-2018-12178: Fixed an improper DNS check upon receiving a new DNS packet bsc1127821. CVE-2018-3630:...
SUSE-SU-2019:0581-1 Security update for ovmf
This update for ovmf fixes the following issues: Security issues fixed: - CVE-2018-12180: Fixed a buffer overflow in BlockIo service, which could lead to memory read/write overrun bsc1127820. - CVE-2018-12178: Fixed an improper DNS check upon receiving a new DNS packet bsc1127821. - CVE-2018-3630...
SUSE-SU-2019:0580-1 Security update for ovmf
This update for ovmf fixes the following issues: Security issues fixed: - CVE-2018-12180: Fixed a buffer overflow in BlockIo service, which could lead to memory read/write overrun bsc1127820. - CVE-2018-12178: Fixed an improper DNS check upon receiving a new DNS packet bsc1127821. - CVE-2018-3630...
SUSE-SU-2019:0579-1 Security update for ovmf
This update for ovmf fixes the following issues: Security issues fixed: - CVE-2018-12180: Fixed a buffer overflow in BlockIo service, which could lead to memory read/write overrun bsc1127820. - CVE-2018-12178: Fixed an improper DNS check upon receiving a new DNS packet bsc1127821. - CVE-2018-3630...