Lucene search
+L

127 matches found

Hacker One
Hacker One
added 2025/12/16 5:15 a.m.30 views

curl: Heap Overflow in cURL AmigaOS Socket Implementation

Buffer Overflow in cURL AmigaOS Socket Implementation Report Metadata - Report ID: H1-CURL-AMIGAOS-001 - Report Title: Heap Buffer Overflow in Curlipv4resolver in AmigaOS Socket Backend - Component: /home/el-ha9/curl/lib/amigaos.c - Curlipv4resolver function - Affected Versions: All cURL versions...

9.3AI score
SaveExploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-1999-0101

Malware in sbrugna...

10CVSS6.4AI score0.07837EPSS
SaveExploits3References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2023-0766

Malicious code in bioql PyPI...

4.3CVSS5.6AI score0.00762EPSS
SaveExploits1References7
ATTACKERKB
ATTACKERKB
added 2025/05/08 10:15 p.m.4 views

CVE-2025-1330

IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyname function...

7.8CVSS6.2AI score0.00264EPSS
SaveExploits0References3Affected Software2
OSV
OSV
added 2025/05/08 10:15 p.m.9 views

CVE-2025-1330

IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyname function...

7.8CVSS6.1AI score0.00264EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/05/08 12:00 a.m.10 views

PT-2025-20426 · Ibm · Ibm Cics Tx Standard +1

Name of the Vulnerable Software and Affected Versions: IBM CICS TX Standard versions 11.1 IBM CICS TX Advanced versions 10.1 through 11.1 Description: The issue is due to the failure to handle DNS return requests by the gethostbyname function, which could allow a local user to execute arbitrary...

7.8CVSS7AI score0.00264EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/05/08 12:00 a.m.17 views

IBM CICS TX Standard 缓冲区错误漏洞

IBM CICS TX Standard is a comprehensive single transaction runtime package from International Business Machines IBM, Inc. It can provide a cloud-native deployment model for standalone applications. A buffer error vulnerability exists in IBM CICS TX Standard version 11.1, which stems from the...

7.8CVSS6.9AI score0.00264EPSS
SaveExploits0References3
Snyk
Snyk
added 2025/03/31 5:23 p.m.7 views

Server-side Request Forgery (SSRF)

Overview mobsf is a Mobile Security Framework MobSF is an automated, all-in-one mobile application Android/iOS/Windows pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. Affected versions of this package are vulnerable to Server-side...

9.8CVSS6.9AI score0.00446EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2023/03/08 12:00 a.m.39 views

Debian: Security Advisory (DLA-139-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.3AI score0.94859EPSS
SaveExploits29References2
F5 Networks
F5 Networks
added 2023/02/21 7:50 p.m.91 views

K16057: GHOST: glibc gethostbyname buffer overflow vulnerability CVE-2015-0235

Security Advisory Description A heap-based buffer overflow was found in glibc's nsshostnamedigitsdots function, which is used by the gethostbyname and gethostbyname2 glibc function calls. A remote attacker may be able to use this flaw to execute arbitrary code. CVE-2015-0235 Impact A remote...

10CVSS8.6AI score0.94859EPSS
SaveExploits29Affected Software20
SUSE CVE
SUSE CVE
added 2023/02/15 5:23 a.m.13 views

SUSE CVE-2015-0235

Heap-based buffer overflow in the nsshostnamedigitsdots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the 1 gethostbyname or 2 gethostbyname2 function, aka "GHOST."...

10CVSS8.2AI score0.94859EPSS
SaveExploits29References15
SUSE CVE
SUSE CVE
added 2023/02/15 3:21 a.m.10 views

SUSE CVE-2023-25165

Helm is a tool that streamlines installing and managing Kubernetes applications.getHostByName is a Helm template function introduced in Helm v3. The function is able to accept a hostname and return an IP address for that hostname. To get the IP address the function performs a DNS lookup. The DNS...

4.3CVSS5.2AI score0.00762EPSS
SaveExploits1References7
OSV
OSV
added 2023/02/14 3:53 p.m.39 views

GO-2023-1547 Information disclosure in helm.sh/helm/v3

An information disclosure vulnerability exists in the getHostByName template function. The function getHostByName is a Helm template function introduced in Helm v3. The function is able to accept a hostname and return an IP address for that hostname. To get the IP address the function performs a...

4.3CVSS4.3AI score0.00762EPSS
SaveExploits1References2
Microsoft CVE
Microsoft CVE
added 2023/02/13 12:00 a.m.5 views

CVE-2023-25165

...

4.3CVSS6.1AI score0.00762EPSS
SaveExploits1
Veracode
Veracode
added 2023/02/12 2:31 p.m.31 views

Information Disclosure

github.com/helm/helm is vulnerable to Information Disclosure. The vulnerability is due to the DNS lookup chart that can disclose IP addresses to a malicious DNS server, which are used to lookup IP addresses when used with the helm install|upgrade|template command via the vulnerable getHostByName...

4.3CVSS5.1AI score0.00762EPSS
SaveExploits1References3Affected Software1
Github Security Blog
Github Security Blog
added 2023/02/08 10:36 p.m.86 views

Helm vulnerable to information disclosure via getHostByName Function

A Helm contributor discovered an information disclosure vulnerability using the getHostByName template function. Impact getHostByName is a Helm template function introduced in Helm v3. The function is able to accept a hostname and return an IP address for that hostname. To get the IP address the...

4.3CVSS4.5AI score0.00762EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2023/02/08 10:36 p.m.23 views

GHSA-PWCW-6F5G-GXF8 Helm vulnerable to information disclosure via getHostByName Function

A Helm contributor discovered an information disclosure vulnerability using the getHostByName template function. Impact getHostByName is a Helm template function introduced in Helm v3. The function is able to accept a hostname and return an IP address for that hostname. To get the IP address the...

4.3CVSS4.5AI score0.00762EPSS
SaveExploits1References6
OSV
OSV
added 2023/02/08 8:15 p.m.10 views

AZL-13558 CVE-2023-25165 affecting package helm for versions less than 3.10.3-3

Helm is a tool that streamlines installing and managing Kubernetes applications.getHostByName is a Helm template function introduced in Helm v3. The function is able to accept a hostname and return an IP address for that hostname. To get the IP address the function performs a DNS lookup. The DNS...

4.3CVSS6.5AI score0.00762EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2023/02/08 7:07 p.m.10 views

CVE-2023-25165 getHostByName Function Information Disclosure

Helm is a tool that streamlines installing and managing Kubernetes applications.getHostByName is a Helm template function introduced in Helm v3. The function is able to accept a hostname and return an IP address for that hostname. To get the IP address the function performs a DNS lookup. The DNS...

4.3CVSS4.6AI score0.00762EPSS
SaveExploits1References2
OSV
OSV
added 2021/11/10 3:15 p.m.21 views

CVE-2021-43523

In uClibc and uClibc-ng before 1.0.39, incorrect handling of special characters in domain names returned by DNS servers via gethostbyname, getaddrinfo, gethostbyaddr, and getnameinfo can lead to output of wrong hostnames leading to domain hijacking or injection into applications leading to remote...

9.6CVSS7.5AI score
SaveExploits0References3
Rows per page
Query Builder