PT-2022-5786 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue exists due to insufficient input validation in the Windows DNS Server component of the Windows operating system. Exploitation of this issue may allow a remote attacker ...

Fedora: Security Advisory for pdns-recursor (FEDORA-2022-d1dcd9b046)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: pdns-recursor-4.6.3-1.fc36

PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...

SUSE-SU-2022:2961-1 Security update for open-vm-tools

This update for open-vm-tools fixes the following issues: - CVE-2022-31676: Fixed an issue that could allow unprivileged users inside a virtual machine to escalate privileges bsc1202657. Non-security fixes: - Update to 11.0.5 build 15389592 bsc1165955 DNS server is reported incorrectly in GuestIn...

Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities with details below Vulnerability Details CVEID:CVE-2022-32212 DESCRIPTION: Node.js could allow a remote attacker to execute arbitrary code on the system, caused by the...

CVE-2022-27615

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in cgi component in Synology DNS Server before 2.2.2-5027 allows remote authenticated users to delete arbitrary files via unspecified vectors...

CVE-2022-27615

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in cgi component in Synology DNS Server before 2.2.2-5027 allows remote authenticated users to delete arbitrary files via unspecified vectors...

CVE-2022-27615

CVE-2022-27615 affects Synology DNS Server prior to 2.2.2-5027, via a path traversal in the cgi component that can allow remote authenticated users to delete arbitrary files. The issue arises from improper restriction of pathnames to restricted directories. Connected sources confirm affected soft...

Synology DNS Server 路径遍历漏洞

Synology DNS Server is a DNS server from Synology China. A path traversal vulnerability exists in Synology DNS Server versions prior to 2.2.2-5027, which stems from an improper restriction of pathnames path traversal of restricted directories in the cgi component, and can be exploited by a remote...

PT-2022-18520 · Synology · Synology Dns Server

Name of the Vulnerable Software and Affected Versions: Synology DNS Server versions prior to 2.2.2-5027 Description: The issue is related to a Path Traversal vulnerability in the cgi component, allowing remote authenticated users to delete arbitrary files. Recommendations: For versions prior to...

CVE-2022-27615

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in cgi component in Synology DNS Server before 2.2.2-5027 allows remote authenticated users to delete arbitrary files via unspecified vectors...

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2022-2019)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-30214

Windows DNS Server Remote Code Execution Vulnerability...

CVE-2022-30214

Windows DNS Server Remote Code Execution Vulnerability...

Remote code execution

Windows DNS Server Remote Code Execution Vulnerability...

CVE-2022-30214 Windows DNS Server Remote Code Execution Vulnerability

...

Windows DNS Server Remote Code Execution Vulnerability

...

Microsoft DNS Server 竞争条件问题漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. Microsoft DNS Server is vulnerable to a competitive conditions issue. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows Server 2022,Windows Server 2022 Server Co...

Node.js: DNS rebinding in --inspect (insufficient fix of CVE-2022-32212 affecting macOS devices)

Summary: This is an insufficient fix of CVE-2022-32212, which itself is a fix of CVE-2018-7160. There exists a specific behaviour in browsers on macOS devices when handling the http://0.0.0.0URL that allows an attacker-controlled DNS server to bypass the DNS rebinding protection by resolving host...

Node.js -- July 7th 2022 Security Releases

Node.js reports: HTTP Request Smuggling - Flawed Parsing of Transfer-Encoding MediumCVE-2022-32213 The llhttp parser in the http module does not correctly parse and validate Transfer-Encoding headers. This can lead to HTTP Request Smuggling HRS. HTTP Request Smuggling - Improper Delimiting of...