Lucene search
+L

1851 matches found

Positive Technologies
Positive Technologies
•added 2020/02/12 12:00 a.m.•30 views

PT-2020-15323 · Jenkins · Jenkins Pipeline Github Notify Step Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Pipeline GitHub Notify Step Plugin versions 1.0.4 and earlier Description: A cross-site request forgery issue allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs, potentially capturing...

8.8CVSS8.5AI score0.00678EPSS
SaveExploits0References8
Circl
Circl
•added 2020/01/28 4:37 p.m.•22 views

CVE-2020-7934

creationtimestamp| type| source ---|---|--- 2020-01-28 16:37:38+00:00| published-proof-of-concept| https://t.me/cveNotify/508 2026-09-03 03:00:05+00:00| seen| Telegram/NJgwL7B1ASSbdk2T8OqFuHqujkni1MAsUBxYkwSwj99SobY 2026-09-04 00:01:03+00:00| published-proof-of-concept|...

5.4CVSS6AI score0.04494EPSS
SaveExploits3References1
BDU FSTEC
BDU FSTEC
•added 2019/12/17 12:00 a.m.•25 views

Unbound DNS Server Buffer Overflow DoS

The vulnerability of the Unbound DNS server is related to an error in processing certain NOTIFY requests. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

7.8CVSS6.6AI score0.03506EPSS
SaveExploits0References7Affected Software3
Tenable Nessus
Tenable Nessus
•added 2019/12/16 12:00 a.m.•49 views

FreeBSD : dovecot -- NULL pointer deref in notify with empty headers (b7dc4dde-2e48-43f9-967a-c68461537cf2)

Aki Tuomi reports Mail with group address as sender will cause a signal 11 crash in push notification drivers. Group address as recipient can cause crash in some drivers. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...

5.3CVSS7.1AI score0.02476EPSS
SaveExploits0References3
FreeBSD
FreeBSD
•added 2019/12/10 12:00 a.m.•43 views

dovecot -- null pointer deref in notify with empty headers

Aki Tuomi reports Mail with group address as sender will cause a signal 11 crash in push notification drivers. Group address as recipient can cause crash in some drivers...

5.3CVSS1.3AI score0.02476EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/12/04 12:00 a.m.•10 views

PT-2019-12570

Name of the Vulnerable Software and Affected Versions folly versions prior to 2019.11.04.00 Description The issue is related to the improper handling of close notify alerts, which can lead to an out-of-bounds read in AsyncSSLSocket. Recommendations For versions prior to 2019.11.04.00, update to...

9.8CVSS0.01744EPSS
SaveExploits0References4
osv_alpine
osv_alpine
•added 2019/11/22 1:15 p.m.•5 views

ALPINE-CVE-2019-10203

PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a serial between 2^31 and 2^32-1 while trying to notify a slave leads to DoS...

4.3CVSS0.01554EPSS
SaveExploits0References1
Mend
Mend
•added 2019/11/22 12:01 p.m.•8 views

CVE-2019-10203

PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a serial between 2^31 and 2^32-1 while trying to notify a slave leads to DoS...

5.3CVSS0.01554EPSS
SaveExploits0References5
CNVD
CNVD
•added 2019/11/18 12:00 a.m.•27 views

Apache MINA Memory Corruption Vulnerability

Apache MINA is the United States Apache Apache Software Foundation of a web application framework. The product is mainly used to develop high-performance and highly scalable web applications. A security vulnerability exists in Apache MINA versions 2.0.20 and 2.1.0. The vulnerability stems from th...

7.5CVSS5.8AI score0.02125EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2019/10/03 7:15 p.m.•15 views

DEBIAN-CVE-2019-16866

Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule...

7.5CVSS6.6AI score0.03506EPSS
SaveExploits0References1
osv_alpine
osv_alpine
•added 2019/10/03 7:15 p.m.•26 views

ALPINE-CVE-2019-16866

Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule...

7.5CVSS6.9AI score0.03506EPSS
SaveExploits0References1
Mend
Mend
•added 2019/10/03 6:53 p.m.•8 views

CVE-2019-16866

Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule...

8.7CVSS0.03506EPSS
SaveExploits0References13
AlpineLinux
AlpineLinux
•added 2019/10/03 6:53 p.m.•118 views

CVE-2019-16866

Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule...

7.5CVSS7.5AI score0.03506EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2019/10/03 6:53 p.m.•3 views

CVE-2019-16866

Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule...

0.03506EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/03 12:00 a.m.•3 views

CVE-2019-16866: Improper Handling of Exceptional Conditions

Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule...

7.5CVSS6.7AI score0.03506EPSS
SaveExploits0References7
FreeBSD
FreeBSD
•added 2019/10/03 12:00 a.m.•204 views

unbound -- parsing vulnerability

Unbound Security Advisories: Due to an error in parsing NOTIFY queries, it is possible for Unbound to continue processing malformed queries and may ultimately result in a pointer dereference in uninitialized memory. This results in a crash of the Unbound daemon...

7.5CVSS3.5AI score0.03506EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/10/03 12:00 a.m.•6 views

PT-2019-4132

Name of the Vulnerable Software and Affected Versions Unbound versions prior to 1.9.4 Description The issue is related to the handling of certain NOTIFY queries, which can be exploited by a remote attacker to trigger a crash. The source IP address of the query must match an access-control rule...

7.8CVSS0.03506EPSS
SaveExploits0References27
osv_debian
osv_debian
•added 2019/10/01 8:15 p.m.•14 views

DEBIAN-CVE-2019-0231

Handling of the closenotify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This...

7.5CVSS6.8AI score0.02125EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2019/10/01 8:15 p.m.•15 views

CVE-2019-0231

Handling of the closenotify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This...

7.5CVSS6.8AI score0.02125EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2019/10/01 8:15 p.m.•18 views

UBUNTU-CVE-2019-0231

Handling of the closenotify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This...

7.5CVSS6.9AI score0.02125EPSS
SaveExploits0References3
Rows per page
Query Builder