Lucene search
+L

12 matches found

NVD
NVD
•added 2026/09/19 7:16 a.m.•15 views

CVE-2026-92421

The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.3 does not verify that the host record being modified belongs to the user making the request, allowing authenticated users holding a Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin...

4.7CVSS0.00288EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/19 6:00 a.m.•18 views

EUVD-2026-83514

The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.3 does not verify that the host record being modified belongs to the user making the request, allowing authenticated users holding a Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin...

4.7CVSS5.9AI score0.00288EPSS
SaveExploits0References1
Veeam
Veeam
•added 2026/08/01 12:00 a.m.•38 views

Preserving Restored InterSystems IRIS Data Before Removing a Storage System

Article Applicability This article expands on the following note from Epic EHR System Protection Restoring from Storage Snapshot in the Veeam Backup & Replication User Guide: Before you start the restore wizard, create an auxiliary host for the LUN mount in the storage system interface, using any...

6AI score
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2026/04/09 7:23 p.m.•15 views

CVE-2026-35519

FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution RCE vulnerability in the DNS host record configuration parameter dns.hostRecord. This vulnerability allows an...

8.8CVSS6.2AI score0.00999EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/07 4:16 p.m.•12 views

CVE-2026-35519

FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution RCE vulnerability in the DNS host record configuration parameter dns.hostRecord. This vulnerability allows an...

8.8CVSS0.00999EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/07 3:18 p.m.•7 views

CVE-2026-35519

FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution RCE vulnerability in the DNS host record configuration parameter dns.hostRecord. This vulnerability allows an...

8.8CVSS6.2AI score0.00999EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/04/07 3:18 p.m.•34 views

CVE-2026-35519 Pi-hole FTL affected by Remote Code Execution (RCE) via dns.hostRecord Newline Injection

FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution RCE vulnerability in the DNS host record configuration parameter dns.hostRecord. This vulnerability allows an...

8.8CVSS0.00999EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/07 3:18 p.m.•14 views

EUVD-2026-19711

FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution RCE vulnerability in the DNS host record configuration parameter dns.hostRecord. This vulnerability allows an...

8.8CVSS6.2AI score0.00999EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/07 3:18 p.m.•11 views

CVE-2026-35519 Pi-hole FTL affected by Remote Code Execution (RCE) via dns.hostRecord Newline Injection

FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution RCE vulnerability in the DNS host record configuration parameter dns.hostRecord. This vulnerability allows an...

8.8CVSS6.3AI score0.00999EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/07 3:18 p.m.•32 views

CVE-2026-35519

CVE-2026-35519 affects Pi-hole FTL (FTLDNS). From 6.0 up to before 6.6, an authenticated attacker could inject arbitrary dnsmasq directives into the dns.hostRecord parameter via newline characters, leading to remote code execution on the host. The vulnerability is fixed in version 6.6. Exploitati...

8.8CVSS6.3AI score0.00999EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2026/04/07 3:18 p.m.•16 views

CVE-2026-35519 Pi-hole FTL affected by Remote Code Execution (RCE) via dns.hostRecord Newline Injection

FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution RCE vulnerability in the DNS host record configuration parameter dns.hostRecord. This vulnerability allows an...

8.8CVSS6.3AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/07 12:00 a.m.•15 views

PT-2026-30884

FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution RCE vulnerability in the DNS host record configuration parameter dns.hostRecord. This vulnerability allows an...

8.8CVSS6.2AI score0.00999EPSS
SaveExploits0References2
Rows per page
Query Builder