PT-2025-6139 · Crates.Io · Hickory-Proto

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue concerns DNSSEC validation routines, which treat entire RRsets of DNSKEY records as trusted once they have established trust in only one of the...

CVE-2023-52164

accessdevice.cgi on Digiever DS-2105 Pro 3.1.0.71-11 devices allows arbitrary file read. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-52163

Digiever DS-2105 Pro 3.1.0.71-11 devices allow timetzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

RUSTSEC-2025-0006 Hickory DNS failure to verify self-signed RRSIG for DNSKEYs

Summary The DNSSEC validation routines treat entire RRsets of DNSKEY records as trusted once they have established trust in only one of the DNSKEYs. As a result, if a zone includes a DNSKEY with a public key that matches a configured trust anchor, all keys in that zone will be trusted to...

CVE-2023-52164

accessdevice.cgi on Digiever DS-2105 Pro 3.1.0.71-11 devices allows arbitrary file read. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-52163

Digiever DS-2105 Pro 3.1.0.71-11 devices allow timetzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-52163

Digiever DS-2105 Pro 3.1.0.71-11 devices allow timetzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-52164

accessdevice.cgi on Digiever DS-2105 Pro 3.1.0.71-11 devices allows arbitrary file read. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

Digiever DS-2105 Pro 安全漏洞

The Digiever DS-2105 Pro is a network video recorder from Digiever. A security vulnerability exists in Digiever DS-2105 Pro version 3.1.0.71-11. An attacker can exploit the vulnerability to read arbitrary files...

PT-2025-1556 · Digiever · Digiever Ds-2105 Pro

Name of the Vulnerable Software and Affected Versions: Digiever DS-2105 Pro version 3.1.0.71-11 Description: The issue allows for arbitrary file read through the access device.cgi file on affected devices. This problem only affects products that are no longer supported by the manufacturer...

CVE-2023-52164

accessdevice.cgi on Digiever DS-2105 Pro 3.1.0.71-11 devices allows arbitrary file read. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-52163

Digiever DS-2105 Pro 3.1.0.71-11 contains a command injection vulnerability in time_tzsetup.cgi. The Nuclei template attributes the issue to unsanitized input in time_tzsetup.cgi, allowing an attacker to execute arbitrary commands remotely. Reported impact is remote code execution with high sever...

CVE-2023-52164

CVE-2023-52164 affects Digiever DS-2105 Pro (3.1.0.71-11). The issue is an arbitrary file read via access_device.cgi, with impact limited to devices no longer supported by the maintainer. Affected component: access_device.cgi on the DS-2105 Pro; root cause not explicitly detailed in the provided ...

PT-2025-1555

Name of the Vulnerable Software and Affected Versions Digiever DS-2105 Pro versions 3.1.0.71-11 Digiever DS-2105 Pro affected versions not specified Description The Digiever DS-2105 Pro network video recorder NVR has a flaw related to missing authorization, allowing for command injection via the...

[SECURITY] [DLA 4021-1] 389-ds-base security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4021-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura January 19, 2025 https://wiki.debian.org/LTS -...

Debian dla-4021 : 389-ds - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4021 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4021-1 [email protected]...

Debian: Security Advisory (DLA-4021-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROS-20250114-03

Vulnerability in the Hash Handler component of the 389-ds-basic package is related to insufficient verification of the of password hashes. Exploitation of the vulnerability could allow an intruder to cause a denial of service...

Logic Flaw Vulnerability in DS-A80624S at Hangzhou Hikvision Digital Technology Co.

The DS-A80624S is a 24-drive network storage device from Hikvision. A logic flaw vulnerability exists in the DS-A80624S of Hangzhou Hikvision Digital Technology Co. that can be exploited by an attacker to obtain sensitive information...

PT-2026-21524

Name of the Vulnerable Software and Affected Versions: 389 Directory Server versions prior to 3.0.6git249.6688af9b2. Description: A heap buffer overflow vulnerability exists in the schema attr enum callback function within the schema.c file of 389 Directory Server. This occurs because the code...