3196 matches found
CVE-2022-20730
A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the Security Intelligence DNS feed. This vulnerability is due to incorrect feed update processing. An attacker could exploit this...
CVE-2022-20767
A vulnerability in the Snort rule evaluation function of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper handling of the DNS reputation enforcement...
PT-2022-2474 · Uclibc +2 · Uclibc +2
Name of the Vulnerable Software and Affected Versions: uClibc-ng versions through 1.0.40 uClibc versions through 0.9.33.2 Description: The issue is related to the use of predictable DNS transaction IDs, which may lead to DNS cache poisoning. This is due to a reset of a value to 0x2. The...
CVE-2022-20760
A vulnerability in the DNS inspection handler of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service condition DoS on an affected device. This vulnerability is due to a lack of proper...
CVE-2022-20767
A vulnerability in the Snort rule evaluation function of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper handling of the DNS reputation enforcement...
CLSA-2022-1650376937 Fix of CVE: CVE-2022-28391
CVE-2022-28391: fix possible terminal injection attacks from DNS query results...
The vulnerability of TP-Link L-WA1201’s microprogramming software arises from buffer overflows in the stack, allowing an attacker to execute arbitrary code.
The vulnerability of TP-Link L-WA1201 microprogrammed software lies in the overflow of buffer on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created DNS message...
OESA-2022-1615 bind security update
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
CVE-2022-26819
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2022-26820
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2022-26814
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2022-26812
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2022-26811
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2022-28109
Selenium Selenium Grid formerly Selenium Standalone Server Fixed in 4.0.0-alpha-7 is affected by: DNS rebinding. The impact is: execute arbitrary code remote. The component is: WebDriver endpoint of Selenium Grid / Selenium Standalone Server. The attack vector is: Triggered by browsing to to a...
Palo Alto Networks PAN-OS 安全漏洞
Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in the Palo Alto Networks PAN-OS software that originates from improper exception handling in the DNS proxy function...
Microsoft DNS Server 竞争条件问题漏洞
Microsoft Windows is an operating system for personal devices, Microsoft Windows Server is a server operating system, and Windows DNS Server is one of the DNS Domain Name System servers. code execution vulnerability in Microsoft Windows DNS Server. The vulnerability stems from the failure of a...
Microsoft DNS Server 信息泄露漏洞
Microsoft Windows is a set of operating systems for personal devices, Microsoft Windows Server is a set of server operating systems, and Windows DNS Server is one of the DNS Domain Name System servers. Vulnerability. The vulnerability is caused by a configuration error in the network system or...
PT-2022-2930 · Microsoft · Windows Dns Server +1
Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows DNS Server component. This allows a remote attacker to execute arbitrary code, affecting...
PT-2022-2779 · Microsoft · Windows Dns Server +1
Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to incorrect code generation management in the Windows DNS Server. It allows remote attackers to execute arbitrary code, affecting the system. Recommendation...
PT-2022-2867 · Microsoft · Windows Dns Server +1
Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to incorrect code generation management in the DNS server of the Microsoft Windows operating system. It allows a remote attacker to execute arbitrary code,...