Lucene search
K

20 matches found

Snyk
Snyk
added 2026/03/26 7:50 p.m.2 views

External Control of Critical State Data

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to External Control of Critical State Data in the CLI routing process after failed service resolution, where Bonjour and DNS-SD TXT metadata could still influence the chosen target. An...

7.1CVSS5.9AI score0.00007EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/12 5:39 p.m.3 views

CVE-2025-68471 Avahi has a reachable assertion in lookup_start

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart...

6.5CVSS6.2AI score0.00022EPSS
Exploits1References3
AlpineLinux
AlpineLinux
added 2026/01/12 5:38 p.m.2 views

CVE-2025-68468

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending unsolicited announcements containing CNAME resource records pointing it to resource records with short TTLs. As soon as they...

6.5CVSS6.7AI score0.00018EPSS
Exploits0References3
OSV
OSV
added 2025/12/18 9:15 p.m.2 views

AZL-72853 CVE-2025-59529 affecting package avahi 0.8-7

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc2, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although CLIENTSMAX ...

5.5CVSS5.7AI score0.00063EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2025/12/18 9:15 p.m.7 views

CVE-2025-59529

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc2, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although CLIENTSMAX ...

5.5CVSS5.8AI score0.00063EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2025/12/18 8:25 p.m.3 views

CVE-2025-59529

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc2, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although CLIENTSMAX ...

5.5CVSS5.2AI score0.00063EPSS
Exploits1
Packet Storm
Packet Storm
added 2017/07/05 12:0 a.m.39 views

IoT mDNS/DNS-SD QM Amplification Distributed Denial Of Service

!/usr/bin/perl IoT mDNS/DNS-SD 'QM' amplification ddos Copyright 2017 c Todor Donev [email protected] https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous program is for Educational purpose ONLY. Do not use it without permission. The usual...

0.3AI score
Exploits0
0day.today
0day.today
added 2017/07/05 12:0 a.m.42 views

IoT mDNS / DNS-SD QM Amplification Distributed Denial Of Service Exploit

IoT mDNS/DNS-SD QM amplification distributed denial of service exploit. !/usr/bin/perl IoT mDNS/DNS-SD 'QM' amplification ddos Copyright 2017 c Todor Donev email protected https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous program is for...

7AI score
Exploits0
Fedora
Fedora
added 2016/07/23 9:6 p.m.24 views

[SECURITY] Fedora 23 Update: kf5-kdnssd-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 integration module for DNS-SD services Zeroconf...

7.5CVSS3AI score0.0639EPSS
Exploits1
Fedora
Fedora
added 2016/07/23 7:7 p.m.16 views

[SECURITY] Fedora 24 Update: kf5-kdnssd-5.24.0-1.fc24

KDE Frameworks 5 Tier 1 integration module for DNS-SD services Zeroconf...

7.5CVSS3AI score0.0639EPSS
Exploits1
Packet Storm
Packet Storm
added 2016/01/15 12:0 a.m.26 views

dbaudio R1 2.14.4 Privilege Escalation

dbaudio R1 v2.14.4 DNS-SD Service Unquoted Service Path Privilege Escalation Vendor: d&b audiotechnik GmbH Product web page: http://www.dbaudio.com Affected version: R1 2.14.4 and DNS-SD 379.32.2 Summary: The R1 Remote control software succeeds the d&b ROPE C software. It is a software package...

0.8AI score
Exploits0
Zero Science Lab
Zero Science Lab
added 2016/01/14 12:0 a.m.190 views

dbaudio R1 v2.14.4 DNS-SD Service Unquoted Service Path Privilege Escalation

Summary The R1 Remote control software succeeds the d&b ROPE C software. It is a software package designed to operate d&b amplifiers D12, D6, E-PAC with Display remotely using the d&b Remote network based on CAN-Bus technology. Description The application suffers from an unquoted search path issu...

6.2AI score
Exploits0
Mageia
Mageia
added 2015/04/04 10:45 a.m.43 views

Updated cups-filters packages fix CVE-2015-2265

Updated cups-filters package fixes security vulnerability: cups-browsed in cups-filters before 1.0.66 contained a bug in the removebadchars function, where it failed to reliably filter out illegal characters if there were two or more subsequent illegal characters, allowing execution of arbitrary...

7.5CVSS6.8AI score0.05767EPSS
Exploits2References3
Fedora
Fedora
added 2014/09/27 9:47 a.m.27 views

[SECURITY] Fedora 20 Update: kdnssd-4.14.1-1.fc20

KDE Network Monitor for DNS-SD services Zeroconf...

6.9CVSS2.1AI score0.00034EPSS
Exploits1
Nmap
Nmap
added 2012/04/17 7:37 p.m.230 views

cups-info NSE Script

Lists printers managed by the CUPS printing service. Script Arguments slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size, http.max-cache-size, http.max-pipeline, http.pipeline, http.truncated-ok, http.useragent See the documentation for the http library...

10CVSS0.94176EPSS
Exploits33
OpenVAS
OpenVAS
added 2010/08/21 12:0 a.m.25 views

Debian: Security Advisory (DSA-2086-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.01122EPSS
Exploits8References3
UbuntuCve
UbuntuCve
added 2006/05/10 2:14 a.m.17 views

CVE-2006-2288

Avahi before 0.6.10 allows local users to cause a denial of service mDNS/DNS-SD service disconnect via unspecified mDNS name conflicts...

3.6CVSS5.9AI score0.00074EPSS
Exploits0References1
NVD
NVD
added 2006/05/10 2:14 a.m.10 views

CVE-2006-2288

Avahi before 0.6.10 allows local users to cause a denial of service mDNS/DNS-SD service disconnect via unspecified mDNS name conflicts...

3.6CVSS6.3AI score0.00074EPSS
Exploits0References6
Prion
Prion
added 2006/05/10 2:14 a.m.11 views

Code injection

Avahi before 0.6.10 allows local users to cause a denial of service mDNS/DNS-SD service disconnect via unspecified mDNS name conflicts...

3.6CVSS6.4AI score0.00074EPSS
Exploits0References6Affected Software1
CVE
CVE
added 2006/05/09 11:0 p.m.39 views

CVE-2006-2288

Avahi in versions prior to 0.6.10 is affected by CVE-2006-2288, allowing local users to trigger a denial of service by causing mDNS/DNS-SD service disconnects due to unspecified mDNS name conflicts. The available documents identify the affected product and the general impact but do not provide ex...

3.6CVSS6.3AI score0.00074EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder