Lucene search
K

9 matches found

Positive Technologies
Positive Technologies
added 2026/02/04 12:0 a.m.6 views

PT-2026-5892

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service affected versions not specified Description An authenticated user on the host network can cause a denial of service by using a specially crafted SQL query that consumes excessive memory resources. Recommendations At...

3.5CVSS5.6AI score0.00216EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:0 a.m.4 views

MiracleLinux 9 : bind9.18-9.18.29-1.el9_5.1 (AXSA:2025-9706:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9706:01 advisory. bind: bind9: Many records in the additional section cause CPU exhaustion CVE-2024-11187 bind: bind9: DNS-over-HTTPS implementation suffers from...

7.5CVSS7.1AI score0.15664EPSS
Exploits0References3
Oracle linux
Oracle linux
added 2025/02/21 12:0 a.m.22 views

bind9.18 security update

32:9.18.29-1.el95.1 - Fix CVE-2024-11187 bind: bind9: Many records in the additional section cause CPU exhaustion - Fix CVE-2024-12705 bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load...

7.5CVSS7.6AI score0.15664EPSS
Exploits0
OSV
OSV
added 2025/02/05 7:51 p.m.7 views

MGASA-2025-0036 Updated bind packages fix security vulnerabilities

Many records in the additional section cause CPU exhaustion. CVE-2024-11187 DNS-over-HTTPS implementation suffers from multiple issues under heavy query load. CVE-2024-12705...

7.5CVSS7.3AI score0.15664EPSS
Exploits0References3
Mageia
Mageia
added 2025/02/05 7:51 p.m.10 views

Updated bind packages fix security vulnerabilities

Many records in the additional section cause CPU exhaustion. CVE-2024-11187 DNS-over-HTTPS implementation suffers from multiple issues under heavy query load. CVE-2024-12705...

7.5CVSS6.9AI score0.15664EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2025/01/29 9:40 p.m.7 views

CVE-2024-12705

Clients using DNS-over-HTTPS DoH can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1...

7.5CVSS7.2AI score0.15664EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2023/09/20 3:56 p.m.39 views

CVE-2023-4236

A flaw was found in the Bind package. The networking code handling DNS-over-TLS queries may cause named to terminate unexpectedly due to an assertion failure. This happens when internal data structures are incorrectly reused under significant DNS-over-TLS query load. A named instance vulnerable t...

7.5CVSS6.9AI score0.0215EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/09/12 2:15 p.m.1 views

CVE-2022-37734

graphql-java before19.0 is vulnerable to Denial of Service. An attacker can send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0 and later, 18.3, and 17.4, and 0.0.0-2022-07-26T05-45-04-226aabd9...

7.5CVSS6.7AI score0.02062EPSS
Exploits1References5
0day.today
0day.today
added 2014/05/20 12:0 a.m.29 views

SMART iPBX SQL Injection Vulnerability

SMART iPBX suffers from multiple remote SQL injection vulnerabilities. SMART iPBX - Multiple Sql Injection =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : email protected , email protected .:. Home : http://www.iphobos.com/blog/ .:...

8.3AI score
Exploits0
Rows per page
Query Builder