Lucene search
K

44 matches found

Vulnrichment
Vulnrichment
added 2026/05/19 4:42 p.m.5 views

CVE-2026-47107 Windmill < 1.703.2 Incorrect Default Permissions in nsjail Configuration

Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandbox configuration files where /etc is bind-mounted without read-write restrictions, allowing authenticated users to write arbitrary entries to /etc/hosts, /etc/resolv.conf, and...

8.6CVSS6AI score0.00018EPSS
Exploits0References4
NVD
NVD
added 2026/03/05 2:16 a.m.1 views

CVE-2026-29125

IDC SFX2100 Satalite Recievers set the /etc/resolv.conf file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network communications, facilitate man-in-the-middle attacks, and cause denial of service...

7.1CVSS0.00018EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/03/05 1:38 a.m.1 views

CVE-2026-29125 IDC SFX2100 Satellite Receiver allows unprivileged modification of DNS configuration due to world-writable `/etc/resolv.conf`

IDC SFX2100 Satalite Recievers set the /etc/resolv.conf file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network communications, facilitate man-in-the-middle attacks, and cause denial of service...

7.1CVSS5.9AI score0.00018EPSS
Exploits1References1
CVE
CVE
added 2026/03/05 1:38 a.m.4 views

CVE-2026-29125

The IDC SFX2100 Satellite Receivers contain a vulnerability where /etc/resolv.conf is set to world-writable by any local user. This allows DNS resolver tampering that can redirect network communications, enable man-in-the-middle attacks, and cause denial of service.CVSS v4 base score 7.1 (HIGH) w...

7.1CVSS5.9AI score0.00018EPSS
Exploits1References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2016-1309

Malware in sbrugna...

3.3CVSS4.1AI score0.00045EPSS
Exploits0References4
CVE
CVE
added 2025/07/28 6:16 p.m.19 views

CVE-2025-8283

CVE-2025-8283 affects the netavark component used with Podman for container networking. Due to removal of the dns.podman search domain, netavark may reveal external servers when a valid A/AAAA record is answered, causing a container whose name matches a domain hostname to resolve to external host...

3.7CVSS6.4AI score0.00322EPSS
Exploits0References5Affected Software2
OSV
OSV
added 2024/09/10 7:43 a.m.20 views

SUSE-SU-2024:3186-1 Security update for buildah

This update for buildah fixes the following issues: Update to version 1.35.4: CVE-2024-3727 updates bsc1224117 Bump go-jose CVE-2024-28180 Bump ocicrypt and go-jose CVE-2024-28180 Update to version 1.35.3: correctly configure /etc/hosts and resolv.conf buildah: refactor resolv/hosts setup. rename...

8.6CVSS7.6AI score0.04986EPSS
Exploits0References8
OSV
OSV
added 2024/09/06 8:23 a.m.24 views

SUSE-SU-2024:3151-1 Security update for buildah

This update for buildah fixes the following issues: Update to version 1.35.4: Bump to Buildah v1.35.4 CVE-2024-3727 updates bsc1224117 integration test: handle new labels in 'bud and test --unsetlabel' Bump go-jose CVE-2024-28180 Bump ocicrypt and go-jose CVE-2024-28180 Update to version 1.35.3:...

8.6CVSS7.6AI score0.04986EPSS
Exploits0References8
OSV
OSV
added 2024/02/23 3:15 p.m.2 views

AZL-43501 CVE-2024-25629 affecting package python-pycares 3.1.1-3

c-ares is a C library for asynchronous DNS requests. aresreadline is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded...

5.5CVSS6.8AI score0.00055EPSS
Exploits0References1
Citrix
Citrix
added 2023/10/25 12:0 a.m.4 views

How to Add a Permanent Search Domain Entry in the Resolv.conf File of a XenServer Host

This article describes how to add a permanent search domain entry in the resolv.conf file of a XenServer Host. When manually editing the resolv.conf file to add search domains, the entries are not persistent after a XenServer Host reboot...

7AI score
Exploits0
Debian CVE
Debian CVE
added 2023/09/18 4:32 p.m.43 views

CVE-2023-4527

A flaw was found in glibc. When the getaddrinfo function is called with the AFUNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data...

6.5CVSS6.2AI score0.00112EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2023/09/12 2:54 p.m.43 views

CVE-2023-4527

A flaw was found in glibc. When the getaddrinfo function is called with the AFUNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data...

6.5CVSS6.8AI score0.00112EPSS
Exploits1References3
Rockylinux
Rockylinux
added 2023/01/12 8:25 a.m.13 views

NetworkManager bug fix and enhancement update

An update is available for NetworkManager. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list NetworkManager is a system network service that manages network device...

0.6AI score
Exploits0
Rockylinux
Rockylinux
added 2022/10/25 7:22 a.m.7 views

NetworkManager bug fix and enhancement update

An update is available for NetworkManager. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list NetworkManager is a system network service that manages network device...

1.6AI score
Exploits0
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2019:3096-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.1CVSS5.3AI score0.00102EPSS
Exploits0References2
Oracle linux
Oracle linux
added 2020/11/10 12:0 a.m.51 views

glibc security, bug fix, and enhancement update

2.28-127.0.1 - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag - add an ASIMD variant of strlen for falkor - Orabug: 2700101. - Modify glibc-ora28849085.patch so it works with RHCK kernels. - Orabug: 28849085. - Make IOfunlockfile match funlockfile and...

7CVSS0.5AI score0.00244EPSS
Exploits1
Fedora
Fedora
added 2020/07/01 1:51 a.m.30 views

[SECURITY] Fedora 32 Update: adns-1.6.0-1.fc32

adns is a resolver library for C and C++ programs. In contrast with the existing interfaces, gethostbyname et al and libresolv, it has the following features: - It is reasonably easy to use for simple programs which just want to translate names to addresses, look up MX records, etc. - It can be...

9.8CVSS0.7AI score0.02617EPSS
Exploits0
Fedora
Fedora
added 2020/07/01 1:38 a.m.28 views

[SECURITY] Fedora 31 Update: adns-1.6.0-1.fc31

adns is a resolver library for C and C++ programs. In contrast with the existing interfaces, gethostbyname et al and libresolv, it has the following features: - It is reasonably easy to use for simple programs which just want to translate names to addresses, look up MX records, etc. - It can be...

9.8CVSS0.7AI score0.02617EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2019/12/04 12:0 a.m.21 views

openSUSE Security Update : cloud-init (openSUSE-2019-2633)

This update for cloud-init to version 19.2 fixes the following issues : Security issue fixed : - CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorizedkeys bsc1129124. Non-security issues fixed : - Short circuit the conditional for identifying the sysconfig renderer...

5.1CVSS5.5AI score0.00102EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2019/12/04 12:0 a.m.24 views

openSUSE Security Update : cloud-init (openSUSE-2019-2621)

This update for cloud-init to version 19.2 fixes the following issues : Security issue fixed : - CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorizedkeys bsc1129124. Non-security issues fixed : - Short circuit the conditional for identifying the sysconfig renderer...

5.1CVSS5.5AI score0.00102EPSS
Exploits0References8
Rows per page
Query Builder