Lucene search
+L

3910 matches found

Debian CVE
Debian CVE
•added 2020/01/22 1:40 a.m.•68 views

CVE-2019-16791

In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy...

6.9CVSS6.1AI score0.00858EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/22 12:00 a.m.•4 views

CVE-2019-16791: Selection of Less-Secure Algorithm During Negotiation

In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy...

6.9CVSS6.7AI score0.00858EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/01/22 12:00 a.m.•3 views

PT-2020-22670

Name of the Vulnerable Software and Affected Versions postfix-mta-sts-resolver versions prior to 0.5.1 Description The issue affects the postfix-mta-sts-resolver, where all users can receive an incorrect response from the daemon under rare conditions. This can lead to a downgrade of the effective...

5.8AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2020/01/13 12:00 a.m.•44 views

EulerOS Virtualization for ARM 64 3.0.5.0 : systemd (EulerOS-SA-2020-1054)

According to the version of the systemd packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In systemd 240, busopensystemwatchbindwithdescription in shared/bus-util.c as used by systemd-resolved to connect to the...

4.4CVSS6AI score0.00511EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2020/01/09 12:00 a.m.•38 views

Fedora Update for unbound FEDORA-2019-0418c12a36

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.7AI score0.03506EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/09 12:00 a.m.•41 views

Fedora Update for unbound FEDORA-2019-a29e620cd4

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.7AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/09 12:00 a.m.•56 views

Fedora Update for knot-resolver FEDORA-2019-866dc03603

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.02107EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2020/01/09 12:00 a.m.•42 views

Fedora Update for bind FEDORA-2019-73a8737068

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS6.9AI score0.04055EPSS
SaveExploits0References2
Veracode
Veracode
•added 2019/12/24 1:16 a.m.•18 views

Information Disclosure

type-graphql is vulnerable to information disclosure. The full resolver source is disclosed in error messages when no subscription topics are provided due to improper parsing of the target parameter in MissingSubscriptionTopicsError.ts...

1.5AI score
SaveExploits0
nodejs
nodejs
•added 2019/12/23 2:07 p.m.•27 views

Information Exposure

Overview Versions of type-graphql prior to 0.17.6 are vulnerable to Information Exposure. The package leaks the resolver source code in an error message. It is possible to force this error when no subscription topics are provided in the request. Recommendation Upgrade to version 0.17.6 or later...

6.9AI score
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2019/12/23 12:00 a.m.•62 views

EulerOS 2.0 SP5 : NetworkManager (EulerOS-SA-2019-2698)

According to the version of the NetworkManager packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure CWE-200 vulnerability in DNS resolver that can result in...

7.5CVSS6.5AI score0.0202EPSS
SaveExploits0References2
Fedora
Fedora
•added 2019/12/18 1:57 a.m.•41 views

[SECURITY] Fedora 31 Update: unbound-1.9.6-1.fc31

Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...

7.5CVSS3AI score0.03506EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2019/12/18 12:00 a.m.•33 views

Knot Resolver < 4.3.0 DoS Vulnerability

Knot Resolver is prone to a denial of service vulnerability through high CPU utilization. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as...

7.5CVSS7.3AI score0.02107EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2019/12/18 12:00 a.m.•32 views

EulerOS 2.0 SP3 : NetworkManager (EulerOS-SA-2019-2636)

According to the version of the NetworkManager packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure CWE-200 vulnerability in DNS resolver that can result in...

7.5CVSS6.5AI score0.0202EPSS
SaveExploits0References2
NVD
NVD
•added 2019/12/16 4:15 p.m.•30 views

CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS7.2AI score0.02107EPSS
SaveExploits1References3
OSV
OSV
•added 2019/12/16 4:15 p.m.•37 views

CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS6.4AI score
SaveExploits0References3
OSV
OSV
•added 2019/12/16 4:15 p.m.•6 views

DEBIAN-CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS7.2AI score0.02107EPSS
SaveExploits1References1
OSV
OSV
•added 2019/12/16 4:15 p.m.•14 views

UBUNTU-CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS7.1AI score0.02107EPSS
SaveExploits1References4
Prion
Prion
•added 2019/12/16 4:15 p.m.•28 views

Design/Logic Flaw

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

5CVSS7.2AI score0.02107EPSS
SaveExploits1References2Affected Software2
UbuntuCve
UbuntuCve
•added 2019/12/16 4:15 p.m.•33 views

CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS7AI score0.02107EPSS
SaveExploits1References3
Rows per page
Query Builder