Lucene search
+L

5509 matches found

OSV
OSV
added 2019/10/17 8:15 p.m.7 views

ALPINE-CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

7.5CVSS6.5AI score0.01273EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/17 8:15 p.m.28 views

CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

7.5CVSS6.3AI score0.01273EPSS
SaveExploits0References3
OSV
OSV
added 2019/10/17 8:15 p.m.22 views

CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

7.5CVSS6.8AI score
SaveExploits0References3
Prion
Prion
added 2019/10/17 8:15 p.m.18 views

Design/Logic Flaw

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

5CVSS7.2AI score0.01273EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2019/10/17 7:17 p.m.71 views

CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

7.5CVSS6.5AI score0.01273EPSS
SaveExploits0
CVE
CVE
added 2019/10/17 7:17 p.m.105 views

CVE-2019-6475

CVE-2019-6475 : In ISC BIND, an error in mirror zone validity checks can allow an on-path attacker to replace zone data that was validated with a trust anchor with forged data. Affected: BIND 9.14.0–9.14.6 and 9.15.0–9.15.4. Impact details are as described in the vulnerability entry; no remediati...

7.5CVSS6.2AI score0.01273EPSS
SaveExploits0References3Affected Software1
AlpineLinux
AlpineLinux
added 2019/10/17 7:17 p.m.76 views

CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

7.5CVSS6.3AI score0.01273EPSS
SaveExploits0
Cvelist
Cvelist
added 2019/10/17 7:17 p.m.35 views

CVE-2019-6475 A flaw in mirror zone validity checking can allow zone data to be spoofed

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

5.9CVSS7.3AI score0.01273EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2019/10/16 12:00 a.m.34 views

CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

7.5CVSS6.8AI score0.01273EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2019/10/03 6:57 p.m.148 views

Important: Red Hat Security Advisory: Red Hat Quay v3.1.1 security update

Updated Quay packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.8CVSS7.1AI score0.83433EPSS
SaveExploits1References7
Openbugbounty
Openbugbounty
added 2019/09/23 7:03 a.m.6 views

inipec.gov.it Open Redirect vulnerability OBB-978564

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

7.1AI score
SaveExploits0
OSV
OSV
added 2019/08/29 3:15 p.m.6 views

CVE-2019-4536

IBM i 7.4 users who have done a Restore User Profile RSTUSRPRF on a system which has been configured with Db2 Mirror for i might have user profiles with elevated privileges caused by incorrect processing during a restore of multiple user profiles. A user with restore privileges could exploit this...

6.3CVSS6.6AI score0.00275EPSS
SaveExploits0References2
Prion
Prion
added 2019/08/29 3:15 p.m.29 views

Design/Logic Flaw

IBM i 7.4 users who have done a Restore User Profile RSTUSRPRF on a system which has been configured with Db2 Mirror for i might have user profiles with elevated privileges caused by incorrect processing during a restore of multiple user profiles. A user with restore privileges could exploit this...

3.3CVSS6.1AI score0.00275EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2019/08/29 3:00 p.m.60 views

CVE-2019-4536

IBM i 7.4 configured with Db2 Mirror for i may be affected. During a Restore User Profile (RSTUSRPRF) on systems with Db2 Mirror, incorrect processing of a multi-profile restore could leave some user profiles with elevated privileges, enabling privilege escalation on the restored system. Remediat...

6.7CVSS6.1AI score0.00275EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/08/29 3:00 p.m.28 views

CVE-2019-4536

IBM i 7.4 users who have done a Restore User Profile RSTUSRPRF on a system which has been configured with Db2 Mirror for i might have user profiles with elevated privileges caused by incorrect processing during a restore of multiple user profiles. A user with restore privileges could exploit this...

6.7CVSS6.1AI score0.00275EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2019/08/29 12:00 a.m.9 views

PT-2019-17120 · Ibm · Ibm I +1

Name of the Vulnerable Software and Affected Versions: IBM i version 7.4 Description: The issue arises when a Restore User Profile RSTUSRPRF is performed on a system configured with Db2 Mirror for i, potentially resulting in user profiles having elevated privileges due to incorrect processing...

6.7CVSS6.1AI score0.00275EPSS
SaveExploits0References3
CNVD
CNVD
added 2019/08/24 12:00 a.m.6 views

IBM i Privilege Vulnerability

IBM i is an American IBM operating system running in IBM Power Systems and IBM PureSystems based on the EBCDIC code. An elevation vulnerability exists in IBM i version 7.4 configured with Db2 Mirror for i, which can be exploited by an attacker to gain elevated privileges...

6.7CVSS7.1AI score0.00275EPSS
SaveExploits0References1
Wired Threat Level
Wired Threat Level
added 2019/07/29 7:25 p.m.74 views

How the West Got China's Social Credit System Wrong

It occupies a spot next to 'Black Mirror' and Big Brother in popular imagination, but China’s social credit project is far more complicated than a single, all-powerful numerical score...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/07/26 12:00 a.m.40 views

SUSE SLES15 Security Update : rmt-server (SUSE-SU-2019:1973-1)

This update for rmt-server to version 2.3.1 fixes the following issues : Fix mirroring logic when errors are encountered bsc1140492 Refactor RMT::Mirror to download metadata/licenses in parallel Check repo metadata GPG signatures during mirroring bsc1132690 Add rmt-server-config subpackage with...

9.8CVSS7.2AI score0.08671EPSS
SaveExploits3References17
Tenable Nessus
Tenable Nessus
added 2019/07/05 12:00 a.m.47 views

SUSE SLES15 Security Update : helm-mirror (SUSE-SU-2019:0048-2)

This update for helm-mirror to version 0.2.1 fixes the following issues : Security issues fixed : CVE-2018-16873: Fixed a remote command execution bsc1118897 CVE-2018-16874: Fixed a directory traversal in 'go get' via curly braces in import path bsc1118898 CVE-2018-16875: Fixed a CPU denial of...

8.1CVSS7AI score0.66252EPSS
SaveExploits0References12
Rows per page
Query Builder