Lucene search
+L

3196 matches found

Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.5 views

PT-2022-2771 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to synchronization errors in the Windows DNS Server component, specifically a "race condition" scenario. This can be exploited by a remote attacker to execut...

8.5CVSS6.9AI score0.01687EPSS
SaveExploits0References23
Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.5 views

PT-2022-2840 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to errors in the code of the Windows operating system. It allows remote attackers to execute arbitrary code, affecting the system. Recommendations: At the...

9CVSS7.6AI score0.03846EPSS
SaveExploits0References22
CNNVD
CNNVD
added 2022/04/12 12:00 a.m.14 views

Microsoft DNS Server 代码注入漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected:Windows Server 2022 Server Core installation,Windows Server, version 20H2 Server Core installation,Windows Server...

9CVSS7.6AI score0.03401EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/04/12 12:00 a.m.13 views

Microsoft DNS Server代码注入漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows Server 2022,Windows Server 2022 Server Core...

8.5CVSS7.2AI score0.02266EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.6 views

PT-2022-2837 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows operating system. It allows remote attackers to execute arbitrary code and affect the...

8.5CVSS6.9AI score0.02266EPSS
SaveExploits0References22
CNNVD
CNNVD
added 2022/04/12 12:00 a.m.10 views

Microsoft DNS Server 代码注入漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected: Windows Server 2008 for x64-based Systems Service Pack 2,Windows Server 2008 for x64-based Systems Service Pack 2 Server...

9CVSS7.5AI score0.03713EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/04/12 12:00 a.m.14 views

Microsoft DNS Server代码注入漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Role: DNS Server. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows Server 2022,Windows Server 2022 Server Cor...

9CVSS7.6AI score0.03459EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.3 views

PT-2022-2769 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to a synchronization error in the Windows DNS Server component, specifically a "race condition" scenario. This can be exploited by a remote attacker to execu...

9CVSS7.1AI score0.03713EPSS
SaveExploits0References23
Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.4 views

PT-2022-2816 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to incorrect code generation management in the Windows DNS Server. It allows remote attackers to execute arbitrary code, affecting the system. Recommendation...

9CVSS7.6AI score0.03401EPSS
SaveExploits0References23
Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.2 views

PT-2022-2838 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows operating system. This allows a remote attacker to execute arbitrary code on the system...

8.5CVSS6.8AI score0.01865EPSS
SaveExploits0References24
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:00 a.m.10 views

The vulnerability of the Node.js software platform’s DNS library, related to insufficient input validation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Node.js software platform’s DNS library is related to the improper handling of atypical symbols in domain names. Exploiting this vulnerability allows an attacker who operates remotely to access confidential data, compromise its integrity, and cause service failures...

10CVSS6.7AI score0.21952EPSS
SaveExploits1References7Affected Software4
OSV
OSV
added 2022/04/06 2:15 p.m.8 views

ALPINE-CVE-2022-24793

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.12 and prior affects applications that use PJSIP DNS resolution. It doesn't affect PJSIP users who utilize an external resolver. This vulnerability is related to...

7.5CVSS7.3AI score0.02194EPSS
SaveExploits1References1
OSV
OSV
added 2022/04/06 2:15 p.m.12 views

UBUNTU-CVE-2022-24793

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.12 and prior affects applications that use PJSIP DNS resolution. It doesn't affect PJSIP users who utilize an external resolver. This vulnerability is related to...

7.5CVSS7.4AI score0.02194EPSS
SaveExploits1References5
OSV
OSV
added 2022/04/03 9:15 p.m.10 views

UBUNTU-CVE-2022-28391

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors...

8.8CVSS7.2AI score0.03492EPSS
SaveExploits1References5
OSV
OSV
added 2022/04/01 11:15 p.m.11 views

UBUNTU-CVE-2022-0425

A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE/EE since version 7.9 allows an attacker to trigger Server Side Request Forgery SSRF attacks...

7.6CVSS5.8AI score0.00609EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
added 2022/03/30 7:00 a.m.4 views

DNS forwarders - cache poisoning vulnerability

...

6.8CVSS7.1AI score0.03357EPSS
SaveExploits0
OSV
OSV
added 2022/03/28 11:15 p.m.10 views

CVE-2021-43105

A vulnerability in the bailiwick checking function in Technitium DNS Server = v7.0 exists that allows specific malicious users to inject NS records of any domain even TLDs into the cache and conduct a DNS cache poisoning attack...

4.3CVSS5.8AI score0.00624EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/23 1:15 p.m.6 views

ALPINE-CVE-2021-25220

BIND 9.11.0 - 9.11.36 9.12.0 - 9.16.26 9.17.0 - 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 - 9.11.36-S1 9.16.8-S1 - 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as th...

6.8CVSS6.6AI score0.03357EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/03/16 12:00 a.m.9 views

ISC BIND 安全漏洞

ISC BIND is a suite of open source software from ISC Corporation that implements the DNS protocol. A security vulnerability exists in ISC BIND, which stems from a timeout or artificially delayed fetch when tracing DS records that could cause "named" to crash when resuming a DS lookup...

7.5CVSS7.4AI score0.01348EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:00 a.m.20 views

The vulnerability of the DNS server service in the Microsoft Windows operating system allows a hacker to increase their privileges.

The vulnerability of the DNS server service in the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.4AI score0.00544EPSS
SaveExploits0References3
Rows per page
Query Builder