24356 matches found
CLSA-2025-1756230743 unbound: Fix of CVE-2023-50868
CVE-2023-50868: avoid availabiluty of the remote attackers to cause a denial of service using DNSSEC...
SUSE CVE-2025-47950
CoreDNS is a DNS server that chains plugins. In versions prior to 1.12.2, a Denial of Service DoS vulnerability exists in the CoreDNS DNS-over-QUIC DoQ server implementation. The server previously created a new goroutine for every incoming QUIC stream without imposing any limits on the number of...
Linux Distros Unpatched Vulnerability : CVE-2018-10920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache. CVE-2018-10920 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2017-11104
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and...
Linux Distros Unpatched Vulnerability : CVE-2017-9106
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in adns before 1.5.2. adnsrrinfo mishandles a bogus datap. The general pattern for formatting integers is to sprintf into a fixed-size...
Linux Distros Unpatched Vulnerability : CVE-2003-1580
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether a dotted quad...
CLSA-2025-1755886204 avahi: Fix of CVE-2024-52615
CVE-2024-52615: fix issue with Avahi-daemon relying on fixed source ports for wide-area DNS queries to prevent attacks with injected malicious DNS responses...
July 8, 2025—KB5062570 (OS Build 25398.1732)
None None...
CVE-2025-53577
CVE-2025-53577 : WordPress plugin Global DNS (versions up to 3.1.0) suffers an improper control of code generation leading to Remote Code Execution (RCE)/Remote Code Inclusion. The issue, described as a Code Injection vulnerability, is exploitable remotely over the network and is rated with a hig...
PT-2025-33988 · Thehp · Thehp Global Dns
Name of the Vulnerable Software and Affected Versions: thehp Global DNS versions n/a through 3.1.0 Description: Improper Control of Generation of Code 'Code Injection' in thehp Global DNS allows Remote Code Inclusion. Recommendations: Versions prior to 3.1.0 are affected...
CLSA-2025-1755512368 bind: Fix of CVE-2023-4408
CVE-2023-4408: reapply patch without dnsnamet ABI change...
Linux Distros Unpatched Vulnerability : CVE-2020-13250
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise include an HTTP API introduced in 1.2.0 and DNS introduced in 1.4.3 caching feature that was vulnerable to denial of...
Linux Distros Unpatched Vulnerability : CVE-2019-19794
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improperly generates random numbers because math/rand is used. The...
Linux Distros Unpatched Vulnerability : CVE-2020-25685
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:replyquery, which is the forwarded que...
WordPress WPExperts Post SMTP plugin authentication bypass vulnerability
WordPress WPExperts Post SMTP plugin is a plugin for optimizing the WordPress email sending process. The main features include custom email services, email logging, DNS authentication and OAuth authorization. An authentication bypass vulnerability exists in the WordPress WPExperts Post SMTP plugi...
Malicious code in acme-dns-01-lightsail (npm)
The package acme-dns-01-lightsail was found to contain malicious code...
MAL-2025-14008 Malicious code in acme-dns-01-lightsail (npm)
The package acme-dns-01-lightsail was found to contain malicious code...
Malicious code in acme-dns-01-freedns (npm)
The package acme-dns-01-freedns was found to contain malicious code...