Lucene search
+L

2106 matches found

Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.7 views

PT-2022-2865 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to insufficient access control to ports in the Windows DNS Server component, allowing a remote attacker to disclose protected information. This can lead to t...

6.8CVSS6.3AI score0.02348EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/04/12 12:00 a.m.21 views

Microsoft DNS Server 代码注入漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows Server 2022,Windows Server 2022 Server Core...

9CVSS7.5AI score0.03713EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/04/12 12:00 a.m.13 views

Microsoft DNS Server 代码注入漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows Server 2022,Windows Server 2022 Server Core...

9CVSS7.5AI score0.03713EPSS
SaveExploits0References6
CNVD
CNVD
added 2022/03/29 12:00 a.m.28 views

TP-LINK TL-WR840N Buffer Overflow Vulnerability

TP-LINK TL-WR840N is a wireless router. The TP-LINK TL-WR840N was found to contain a buffer overflow via DNS server parameter overflow. An attacker could exploit this vulnerability to cause program runtime failure, system downtime, reboot, and other consequences...

7.2CVSS7.4AI score0.01253EPSS
SaveExploits1References1
Prion
Prion
added 2022/03/28 11:15 p.m.18 views

Design/Logic Flaw

A vulnerability in the bailiwick checking function in Technitium DNS Server = v7.0 exists that allows specific malicious users to inject NS records of any domain even TLDs into the cache and conduct a DNS cache poisoning attack...

4CVSS4.6AI score0.00624EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/03/28 10:02 p.m.27 views

CVE-2021-43105

A vulnerability in the bailiwick checking function in Technitium DNS Server = v7.0 exists that allows specific malicious users to inject NS records of any domain even TLDs into the cache and conduct a DNS cache poisoning attack...

4.9AI score0.00624EPSS
SaveExploits0References1
CVE
CVE
added 2022/03/28 10:02 p.m.93 views

CVE-2021-43105

Technitium DNS Server vulnerabilities: A bailiwick checking function flaw in versions ≤ 7.0 allows malicious users to inject NS records of any domain (even TLDs) into the cache, enabling DNS cache poisoning. The PT-2022-11786 entry and CNNVD/CVE references corroborate this, stating the impact as ...

4.3CVSS4.6AI score0.00624EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/03/28 12:00 a.m.16 views

PT-2022-11786 · Technitium · Technitium Dns Server

Name of the Vulnerable Software and Affected Versions: Technitium DNS Server versions = 7.0 Description: A vulnerability in the bailiwick checking function exists that allows specific malicious users to inject NS records of any domain into the cache and conduct a DNS cache poisoning attack...

4.3CVSS4.6AI score0.00624EPSS
SaveExploits0References5
Fedora
Fedora
added 2022/03/27 1:40 a.m.33 views

[SECURITY] Fedora 34 Update: bind-9.16.27-1.fc34

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

6.8CVSS7.3AI score0.03357EPSS
SaveExploits0
Fedora
Fedora
added 2022/03/26 3:56 p.m.40 views

[SECURITY] Fedora 36 Update: bind-9.16.27-1.fc36

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

6.8CVSS7.3AI score0.03357EPSS
SaveExploits0
Fedora
Fedora
added 2022/03/22 3:44 a.m.33 views

[SECURITY] Fedora 35 Update: bind-9.16.27-1.fc35

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

6.8CVSS7.3AI score0.03357EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/03/16 11:00 a.m.5 views

CVE-2021-25220

BIND 9.11.0 - 9.11.36 9.12.0 - 9.16.26 9.17.0 - 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 - 9.11.36-S1 9.16.8-S1 - 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as th...

6.8CVSS6.8AI score0.03357EPSS
SaveExploits0References16
Microsoft KB
Microsoft KB
added 2022/03/08 8:00 a.m.474 views

March 8, 2022—KB5011495 (OS Build 14393.5006) - EXPIRED

None None...

9CVSS6.8AI score0.56376EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:00 a.m.15 views

The vulnerability of the Windows DNS Server component for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows DNS Server component for operating systems involves incorrect code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted request...

8.8CVSS8.3AI score0.04797EPSS
SaveExploits0References3
Redos
Redos
added 2022/02/22 12:00 a.m.33 views

ROS-20220209-01

A vulnerability in the BIND DNS server is related to improper consumption of internal resources during cache processing. Exploitation of the vulnerability could allow an attacker acting remotely to cause resource exhaustion and Perform a denial-of-service DoS attack...

5.3CVSS7.3AI score0.10576EPSS
SaveExploits0
NVD
NVD
added 2022/02/09 5:15 p.m.33 views

CVE-2022-21984

Windows DNS Server Remote Code Execution Vulnerability...

8.8CVSS0.04797EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/09 5:15 p.m.32 views

Remote code execution

Windows DNS Server Remote Code Execution Vulnerability...

6CVSS8.8AI score0.04797EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2022/02/09 4:36 p.m.48 views

CVE-2022-21984 Windows DNS Server Remote Code Execution Vulnerability

...

8.8CVSS8.8AI score0.04797EPSS
SaveExploits0References1
CVE
CVE
added 2022/02/09 4:36 p.m.223 views

CVE-2022-21984

CVE-2022-21984 is a Windows DNS Server Remote Code Execution vulnerability. The issue affects Windows DNS Server when dynamic updates are enabled, potentially allowing an attacker to take over the DNS server and execute code with elevated privileges. Mitigation in the provided documents points to...

8.8CVSS8.8AI score0.04797EPSS
SaveExploits0References1Affected Software3
Tenable Nessus
Tenable Nessus
added 2022/02/09 12:00 a.m.76 views

Rocky Linux 8 : nginx:1.16 (RLSA-2021:2290)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:2290 advisory. - A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory...

7.7CVSS7.8AI score0.53461EPSS
SaveExploits10References3
Rows per page
Query Builder