Lucene search
+L

242 matches found

EUVD
EUVD
added 2025/10/03 8:07 p.m.7 views

EUVD-2025-21730

Malicious code in bioql PyPI...

8.7CVSS6.2AI score0.00199EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.5 views

EUVD-2023-32132

Malicious code in bioql PyPI...

7.5CVSS7.7AI score0.01773EPSS
SaveExploits0References11
Redos
Redos
added 2025/09/30 12:00 a.m.9 views

ROS-20250930-05

The Unbound DNS server vulnerability is related to a logical error in the EDNS client subnet ECS implementation. Exploitation of the vulnerability allows a remote attacker to perform cache poisoning attacks...

8.7CVSS7AI score0.00199EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2018-14663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a DNS query with trailing data such that the addition of a record b...

5.9CVSS6.3AI score0.02572EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2016-7069

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to ad...

7.5CVSS6.7AI score0.0458EPSS
SaveExploits0References2
Amazon
Amazon
added 2025/08/08 12:00 a.m.12 views

Important: unbound

Issue Overview: A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet ECS. Unbound is also vulnerable when compiled with ECS support, i.e., '--enable-subnet', AND configured to send ECS information along wit...

8.7CVSS6.8AI score0.00199EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/06 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-5994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet ECS. Unbound is...

8.7CVSS6.9AI score0.00199EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2025/08/05 8:17 a.m.16 views

unbound: Unbound Cache poisoning

A cache poisoning flaw was found in Unbound. Resolvers supporting EDNS Client Subnet ECS must segregate outgoing queries to accommodate different outgoing ECS information. This issue reopens resolvers to a birthday paradox attack, known as the Rebirthday Attack, which attempts to match the DNS...

8.7CVSS7.3AI score0.00199EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/08/04 3:19 p.m.20 views

unbound: Unbound Cache poisoning

A cache poisoning flaw was found in Unbound. Resolvers supporting EDNS Client Subnet ECS must segregate outgoing queries to accommodate different outgoing ECS information. This issue reopens resolvers to a birthday paradox attack, known as the Rebirthday Attack, which attempts to match the DNS...

8.7CVSS7.3AI score0.00199EPSS
SaveExploits0References5
Amazon
Amazon
added 2025/08/04 12:00 a.m.8 views

Important: unbound

Issue Overview: A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet ECS. Unbound is also vulnerable when compiled with ECS support, i.e., '--enable-subnet', AND configured to send ECS information along wit...

8.7CVSS6.7AI score0.00199EPSS
SaveExploits0
Amazon
Amazon
added 2025/08/04 12:00 a.m.11 views

Important: unbound

Issue Overview: A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet ECS. Unbound is also vulnerable when compiled with ECS support, i.e., '--enable-subnet', AND configured to send ECS information along wit...

8.7CVSS6.7AI score0.00199EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/04 12:00 a.m.14 views

Amazon Linux 2 : unbound (ALAS-2025-2951)

The version of unbound installed on the remote host is prior to 1.7.3-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2951 advisory. A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS...

8.7CVSS6.5AI score0.00199EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/04 12:00 a.m.6 views

Amazon Linux 2 : unbound (ALASUNBOUND-1.17-2025-005)

The version of unbound installed on the remote host is prior to 1.17.0-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2UNBOUND-1.17-2025-005 advisory. A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that...

8.7CVSS6.5AI score0.00199EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2025/07/28 10:47 a.m.7 views

unbound: Unbound Cache poisoning

A cache poisoning flaw was found in Unbound. Resolvers supporting EDNS Client Subnet ECS must segregate outgoing queries to accommodate different outgoing ECS information. This issue reopens resolvers to a birthday paradox attack, known as the Rebirthday Attack, which attempts to match the DNS...

8.7CVSS7.3AI score0.00199EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/07/25 12:00 a.m.6 views

Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : Unbound vulnerabilities (USN-7666-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7666-1 advisory. Xiang Li discovered that Unbound incorrectly handled EDNS Client Subnet ECS in certain configurations. A remote attacker could possibly use th...

8.7CVSS6.6AI score0.00199EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2025/07/22 3:58 p.m.9 views

USN-7666-1: Unbound vulnerabilities

Xiang Li discovered that Unbound incorrectly handled EDNS Client Subnet ECS in certain configurations. A remote attacker could possibly use this issue to perform a cache poisoning attack called Rebirthday Attack...

8.7CVSS6.8AI score0.00199EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/07/21 11:24 p.m.4 views

SUSE CVE-2025-30192

An attacker spoofing answers to ECS enabled requests sent out by the Recursor has a chance of success higher than non-ECS enabled queries. The updated version include various mitigations against spoofing attempts of ECS enabled queries by chaining ECS enabled requests and enforcing stricter...

7.5CVSS6.9AI score0.00229EPSS
SaveExploits0References3
OSV
OSV
added 2025/07/21 1:15 p.m.3 views

DEBIAN-CVE-2025-30192

An attacker spoofing answers to ECS enabled requests sent out by the Recursor has a chance of success higher than non-ECS enabled queries. The updated version include various mitigations against spoofing attempts of ECS enabled queries by chaining ECS enabled requests and enforcing stricter...

7.5CVSS5.4AI score0.00229EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2025/07/21 12:49 p.m.14 views

CVE-2025-30192

An attacker spoofing answers to ECS enabled requests sent out by the Recursor has a chance of success higher than non-ECS enabled queries. The updated version include various mitigations against spoofing attempts of ECS enabled queries by chaining ECS enabled requests and enforcing stricter...

7.5CVSS7.2AI score0.00229EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/07/21 12:00 a.m.12 views

PowerDNS Recursor 安全漏洞

PowerDNS Recursor pdnsrecursor is a domain name resolution server from the Dutch company PowerDNS. A security vulnerability exists in PowerDNS Recursor versions 5.0.10, 5.1.4, and 5.2.2 and above, which stems from the fact that spoofing attempts for ECS-enabled queries have a higher chance of...

7.5CVSS6.1AI score0.00229EPSS
SaveExploits0References3
Rows per page
Query Builder