Lucene search
+L

2625 matches found

NVD
NVD
added 2024/02/13 2:15 p.m.29 views

CVE-2023-5517

A flaw in query-handling code can cause named to exit prematurely with an assertion failure when: - nxdomain-redirect ; is configured, and - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN response. This issue affects BIND 9 versio...

7.5CVSS7.4AI score0.01231EPSS
SaveExploits0References7
OSV
OSV
added 2024/02/13 2:15 p.m.47 views

CVE-2023-5517

A flaw in query-handling code can cause named to exit prematurely with an assertion failure when: - nxdomain-redirect ; is configured, and - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN response. This issue affects BIND 9 versio...

7.5CVSS7.1AI score0.01231EPSS
SaveExploits0References7
Prion
Prion
added 2024/02/13 2:15 p.m.30 views

Design/Logic Flaw

A flaw in query-handling code can cause named to exit prematurely with an assertion failure when: - nxdomain-redirect ; is configured, and - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN response. This issue affects BIND 9 versio...

5CVSS6.9AI score0.01231EPSS
SaveExploits0References6
AlpineLinux
AlpineLinux
added 2024/02/13 2:4 p.m.60 views

CVE-2023-5517

A flaw in query-handling code can cause named to exit prematurely with an assertion failure when: - nxdomain-redirect ; is configured, and - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN response. This issue affects BIND 9 versio...

7.5CVSS7.3AI score0.01231EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2024/02/13 12:0 a.m.40 views

CVE-2023-5517

A flaw in query-handling code can cause named to exit prematurely with an assertion failure when: - nxdomain-redirect ; is configured, and - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN response. This issue affects BIND 9 versio...

7.5CVSS7.1AI score0.01231EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2024/02/13 12:0 a.m.39 views

ISC BIND 9.12.0 < 9.16.48 / 9.16.8-S1 < 9.16.48-S1 / 9.18.0 < 9.18.24 / 9.18.11-S1 < 9.18.24-S1 / 9.19.0 < 9.19.21 Assertion Failure (cve-2023-5517)

The version of ISC BIND installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the cve-2023-5517 advisory. - A flaw in query-handling code can cause named to exit prematurely with an assertion failure when: - nxdomain-redirect ; is...

7.5CVSS7.5AI score0.01231EPSS
SaveExploits0References2
NVD
NVD
added 2024/02/06 4:15 p.m.22 views

CVE-2024-24015

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters to perform SQL via /sys/user/exit...

9.8CVSS9.7AI score0.00609EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/02/06 12:0 a.m.8 views

Novel-Plus Security Vulnerability

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. A security vulnerability exists in Novel-Plus version v4.3.0-RC1 and prior versions. An attacker can exploit the vulnerability by passing in specially crafted offset, limit, and sort parameters to perform a SQL...

9.8CVSS7.8AI score0.00609EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/02/06 12:0 a.m.29 views

CVE-2024-24015

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters to perform SQL via /sys/user/exit...

10AI score0.00609EPSS
SaveExploits0References2
OSV
OSV
added 2024/02/06 12:0 a.m.161 views

CVE-2024-24015

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters to perform SQL via /sys/user/exit...

9.8CVSS8.1AI score0.00609EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2024/01/29 12:0 a.m.44 views

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.10 : TinyXML vulnerability (USN-6612-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6612-1 advisory. It was discovered that TinyXML incorrectly handled certain inputs. If a user or an automated system were tricked into...

7.5CVSS7.3AI score0.01372EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2024/01/25 8:13 a.m.7 views

kernel: Race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode BUG in include/linux/swapops.h

A flaw was found in pfnswapentrytopage in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmdt x...

4.7CVSS6.7AI score0.00179EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/01/09 12:0 a.m.8 views

PT-2024-8366 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to insufficient input validation in the riscv component of the Linux kernel. This can lead to a denial of service when the code to patch lies outside the exit...

7.8CVSS6.7AI score0.78388EPSS
SaveExploits2References466
Tenable Nessus
Tenable Nessus
added 2024/01/07 12:0 a.m.43 views

Fedora 39 : tinyxml (2024-80e6578a01)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-80e6578a01 advisory. Bugfix release. Includes security fixes for CVE-2021-42260 and CVE-2023-34194 and a fix for incorrect text element encoding upstream isssue 51...

7.5CVSS7.4AI score0.03055EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2023/12/26 12:0 a.m.12 views

The vulnerability of the stb_image.h component in the C/C++ Libstb library allows a hacker to cause a service failure.

The vulnerability of the stbimage.h component in the C/C++ Libstb library relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially created HDR file...

7.8CVSS6.4AI score0.01219EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/12/22 12:0 a.m.17 views

The vulnerability of the ACEManager component in the microprogramming software ALEOS for Sierra Wireless’ routers allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the ACEManager component in the ALEOS router software from Sierra Wireless relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to trigger a Denial-of-Service attack remotely...

7.8CVSS7.3AI score0.00819EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/12/13 2:15 p.m.13 views

CVE-2023-34194

StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion and application exit via a crafted XML document with a '\0' located after whitespace...

7.5CVSS7.3AI score
SaveExploits0References7
OSV
OSV
added 2023/12/13 2:15 p.m.7 views

UBUNTU-CVE-2023-34194

StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion and application exit via a crafted XML document with a '\0' located after whitespace...

7.5CVSS5.8AI score0.01372EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2023/12/13 12:0 a.m.56 views

CVE-2023-34194

StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion and application exit via a crafted XML document with a '\0' located after whitespace...

7.5AI score0.01372EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2023/12/13 12:0 a.m.31 views

CVE-2023-34194

StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion and application exit via a crafted XML document with a '\0' located after whitespace...

7.5CVSS7.3AI score0.01372EPSS
SaveExploits0
Rows per page
Query Builder