Lucene search
+L

336 matches found

Positive Technologies
Positive Technologies
added 2022/11/02 12:00 a.m.9 views

PT-2022-5527 · Cisco · Cisco Ise

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE Software affected versions not specified Description: A vulnerability in the feature that monitors RADIUS requests could allow an unauthenticated, remote attacker to negatively affect the performance of an...

5.3CVSS5.1AI score0.00845EPSS
SaveExploits0References5
OSV
OSV
added 2022/10/25 2:30 p.m.18 views

SUSE-SU-2022:3729-1 Security update for bind

This update for bind fixes the following issues: - CVE-2022-2795: Fixed potential performance degredation due to missing database lookup limits when processing large delegations bsc1203614. - CVE-2022-38177: Fixed a memory leak that could be externally triggered in the DNSSEC verification code fo...

7.5CVSS6.4AI score0.02647EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2022/10/24 12:00 a.m.34 views

SUSE: Security Advisory (SUSE-SU-2022:3682-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.02647EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/10/22 12:00 a.m.48 views

SUSE SLED15: bind / bind-chrootenv / bind-devel / bind-doc / bind-utils / etc (SUSE-SU-2022:3682-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3682-1 advisory. - CVE-2022-2795: Fixed potential performance degredation due to missing database lookup limits...

7.5CVSS6.8AI score0.02647EPSS
SaveExploits0References11
OSV
OSV
added 2022/10/21 9:42 a.m.20 views

SUSE-SU-2022:3682-1 Security update for bind

This update for bind fixes the following issues: - CVE-2022-2795: Fixed potential performance degredation due to missing database lookup limits when processing large delegations bsc1203614. - CVE-2022-38177: Fixed a memory leak that could be externally triggered in the DNSSEC verification code fo...

7.5CVSS6.4AI score0.02647EPSS
SaveExploits0References8
NVD
NVD
added 2022/10/11 8:15 p.m.27 views

CVE-2022-20425

In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent degradation of performance due to resource exhaustion. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

5.5CVSS0.00133EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2022/10/05 12:00 a.m.34 views

SUSE: Security Advisory (SUSE-SU-2022:3500-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.2AI score0.02647EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/10/05 12:00 a.m.27 views

SUSE: Security Advisory (SUSE-SU-2022:3499-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.2AI score0.02647EPSS
SaveExploits0References6
OSV
OSV
added 2022/10/04 8:43 a.m.18 views

SUSE-SU-2022:3499-1 Security update for bind

This update for bind fixes the following issues: - CVE-2022-2795: Fixed potential performance degredation due to missing database lookup limits when processing large delegations bsc1203614. - CVE-2022-38177: Fixed a memory leak that could be externally triggered in the DNSSEC verification code fo...

7.5CVSS6.4AI score0.02647EPSS
SaveExploits0References7
CVE
CVE
added 2022/09/21 10:15 a.m.740 views

CVE-2022-2795

CVE-2022-2795 is a DNS resolver vulnerability in BIND where flooding the resolver with specific queries can cause a denial of service by severely degrading resolver performance. The issue is associated with the BIND 9 series (notably 9.16.x, 9.18.x, and 9.19.x branches in various advisories) and ...

5.3CVSS6.5AI score0.01723EPSS
SaveExploits0References9Affected Software1
Positive Technologies
Positive Technologies
added 2022/09/21 12:00 a.m.7 views

PT-2022-6741 · Nlnet +8 · Unbound +8

Name of the Vulnerable Software and Affected Versions: Unbound versions prior to 1.16.3 Description: The issue is related to a Non-Responsive Delegation Attack NRDelegation Attack that affects various DNS resolving software, including Unbound. This attack involves a malicious delegation with a...

7.8CVSS6.6AI score0.99995EPSS
SaveExploits1References72
The Hacker News
The Hacker News
added 2022/07/22 9:00 a.m.32 views

An Easier Way to Keep Old Python Code Healthy and Secure

Python has its pros and cons, but it's nonetheless used extensively. For example, Python is frequently used in data crunching tasks even when there are more appropriate languages to choose from. Why? Well, Python is relatively easy to learn. Someone with a science background can pick up Python mu...

7.3AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2022/07/01 12:05 a.m.89 views

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

8.2CVSS6.8AI score0.05524EPSS
SaveExploits9References5
AlmaLinux
AlmaLinux
added 2022/06/30 12:00 a.m.69 views

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: buffer overflow in IPsec ESP transformation code CVE-2022-27666 kernel: out-of-bounds read in fbcongetfont function CVE-2020-28915 For more details about the security issues, including th...

7.8CVSS7.7AI score0.05524EPSS
SaveExploits2References6
OSV
OSV
added 2022/06/02 1:17 p.m.13 views

CLSA-2022-1654175851 Fixed CVE-2021-25219 in bind

CVE-2021-25219: fix possible performance degradation by disabling lame-ttl cache...

5.3CVSS6.4AI score0.10576EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/05/26 12:00 a.m.33 views

EulerOS 2.0 SP3 : bind (EulerOS-SA-2022-1705)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In BIND 9.3.0 - 9.11.35, 9.12.0 - 9.16.21, and versions 9.9.3-S1 - 9.11.35-S1 and 9.16.8-S1 - 9.16.21-S1 of BIND Supported Preview Edition, as wel...

5.3CVSS6.3AI score0.10576EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/05/07 12:00 a.m.23 views

EulerOS Virtualization 3.0.2.0 : bind (EulerOS-SA-2022-1685)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In BIND 9.3.0 - 9.11.35, 9.12.0 - 9.16.21, and versions 9.9.3-S1 - 9.11.35-S1 and 9.16.8-S1 - 9.16.21-S1 of BIND Supported Preview...

5.3CVSS6.3AI score0.10576EPSS
SaveExploits0References2
PyPA
PyPA
added 2022/05/06 12:15 a.m.12 views

PYSEC-2022-187

TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideoplayer prior to 2.0.0 can theoretically lead to performance degradation. There are no known workarounds. This issue has been patched and users are advised to upgrade to version...

4.3CVSS6.8AI score0.00518EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/05/05 11:35 p.m.24 views

CVE-2022-24902 Memory issue in playing videos

TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideoplayer prior to 2.0.0 can theoretically lead to performance degradation. There are no known workarounds. This issue has been patched and users are advised to upgrade to version...

2.9CVSS4.9AI score0.00518EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/05/05 11:35 p.m.5 views

CVE-2022-24902 Memory issue in playing videos

TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideoplayer prior to 2.0.0 can theoretically lead to performance degradation. There are no known workarounds. This issue has been patched and users are advised to upgrade to version...

2.9CVSS4.6AI score0.00518EPSS
SaveExploits0References2
Rows per page
Query Builder