Lucene search
K

22 matches found

NVD
NVD
added 2026/04/29 7:16 p.m.1 views

CVE-2026-7424

Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network actor to corrupt the device's IPv6 address assignment, DNS configuration, and lease times, and to cause a denial of service permanent IP task freeze requiring hardware reset ...

8.1CVSS0.00023EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/04/29 12:0 a.m.2 views

FreeRTOS-Plus-TCP 数字错误漏洞

FreeRTOS-Plus-TCP is an extensible, open-source, and thread-safe TCP/IP stack designed for use with FreeRTOS. Versions prior to V4.4.1 and V4.2.6 of FreeRTOS-Plus-TCP contained a numerical error vulnerability. This vulnerability stemmed from integer underflow in the DHCPv6 sub-option parser, whic...

8.1CVSS5.8AI score0.00023EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/04/09 7:23 p.m.0 views

CVE-2026-35520

FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution RCE vulnerability in the DHCP lease time configuration parameter dhcp.leaseTime. This vulnerability allows an...

8.8CVSS6.2AI score0.0048EPSS
Exploits1References1
NVD
NVD
added 2026/04/07 4:16 p.m.0 views

CVE-2026-35520

FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution RCE vulnerability in the DHCP lease time configuration parameter dhcp.leaseTime. This vulnerability allows an...

8.8CVSS0.0048EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/04/07 3:19 p.m.2 views

CVE-2026-35520 Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.leaseTime Newline Injection

FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution RCE vulnerability in the DHCP lease time configuration parameter dhcp.leaseTime. This vulnerability allows an...

8.8CVSS6.2AI score0.0048EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/04/07 3:19 p.m.14 views

CVE-2026-35520 Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.leaseTime Newline Injection

FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution RCE vulnerability in the DHCP lease time configuration parameter dhcp.leaseTime. This vulnerability allows an...

8.8CVSS0.0048EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/04/07 3:19 p.m.1 views

CVE-2026-35520

FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution RCE vulnerability in the DHCP lease time configuration parameter dhcp.leaseTime. This vulnerability allows an...

8.8CVSS6.2AI score0.0048EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2026/04/07 3:19 p.m.9 views

CVE-2026-35520

Pi-hole FTLDNS (pihole-FTL) versions 6.0 through

8.8CVSS6.2AI score0.0048EPSS
Exploits1References1Affected Software1
EUVD
EUVD
added 2026/04/07 3:19 p.m.1 views

EUVD-2026-19713

FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution RCE vulnerability in the DHCP lease time configuration parameter dhcp.leaseTime. This vulnerability allows an...

8.8CVSS6.2AI score0.0048EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/04/07 12:0 a.m.2 views

PT-2026-30885

FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution RCE vulnerability in the DHCP lease time configuration parameter dhcp.leaseTime. This vulnerability allows an...

8.8CVSS6.2AI score0.0048EPSS
Exploits1References2
CVE
CVE
added 2025/12/30 2:32 p.m.5 views

CVE-2025-15252

Affected product: Tenda M3, version 1.0.0.13(4903). Vulnerable component: function formSetRemoteDhcpForAp in /goform/setDhcpAP. Root cause: manipulation of arguments startip, endip, leasetime, gateway, dns1, dns2 leads to a stack-based buffer overflow. Impact: remote attacker can trigger the over...

9CVSS7AI score0.00254EPSS
Exploits1References5Affected Software1
OpenVAS
OpenVAS
added 2023/05/15 12:0 a.m.27 views

etcd < 3.4.26, 3.5.x < 3.5.9 Information Disclosure Vulnerability (GHSA-3p4g-rcw5-8298)

etcd is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:etcd:etcd"; if...

4.3CVSS9.1AI score0.0036EPSS
Exploits0References1
OSV
OSV
added 2023/05/11 8:15 p.m.0 views

UBUNTU-CVE-2023-32082

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.26 and 3.5.9, the LeaseTimeToLive API allows access to key names not value associated to a lease when Keys parameter is true, even a user doesn't have read permission to the keys. The impact is limit...

4.3CVSS7.1AI score0.0036EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2023/05/11 12:0 a.m.1 views

PT-2023-23594 · Etcd +3 · Etcd +3

Name of the Vulnerable Software and Affected Versions: etcd versions prior to 3.4.26 and prior to 3.5.9 Description: The issue is related to insufficient protection of service data in etcd, a distributed key-value store. The LeaseTimeToLive API allows access to key names associated with a lease...

9.8CVSS6.9AI score0.0036EPSS
Exploits0References31
CNNVD
CNNVD
added 2023/05/11 12:0 a.m.2 views

etcd 信息泄露漏洞

etcd is a key-value storage system for distributed systems written in the Go language. An information disclosure vulnerability exists in etcd version 3.4 up to and including version 3.4.26, and version 3.5 up to and including version 3.5.9, which stems from the fact that key names can be accessed...

4.3CVSS6.4AI score0.0036EPSS
Exploits0References6
Citrix
Citrix
added 2018/08/28 12:0 a.m.8 views

How to use Citrix App Layering with Fixed IP Addresses

In App Layering, the ELM needs to be able to determine which NIC device is the "active" NIC. The ELM must determine the active NIC in orderto properly merge network instances and services from different layers, howeverthere's no flag in the registry that identifies the NIC that will be used to...

7AI score
Exploits0
Amazon
Amazon
added 2013/03/02 12:0 a.m.43 views

Low: dhcp

Issue Overview: A flaw was found in the way the dhcpd daemon handled the expiration time of IPv6 leases. If dhcpd's configuration was changed to reduce the default IPv6 lease time, lease renewal requests for previously assigned leases could cause dhcpd to crash. CVE-2012-3955 Affected Packages:...

7.1CVSS6.5AI score0.17439EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2011/04/20 12:0 a.m.27 views

SuSE 11.1 Security Update : dhcpcd (SAT Patch Number 4389)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0996 Note this update is...

6.8CVSS5.5AI score0.00922EPSS
Exploits0References10
Tenable Nessus
Tenable Nessus
added 2006/07/05 12:0 a.m.51 views

CentOS 4 : kernel (CESA-2006:0101)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

7.8CVSS5.5AI score0.13591EPSS
Exploits17References20
RedHat Linux
RedHat Linux
added 2006/01/19 4:3 p.m.55 views

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

7.8CVSS6AI score0.13082EPSS
Exploits11References13
Rows per page
Query Builder