Lucene search
K

360 matches found

Github Security Blog
Github Security Blog
added 2026/05/07 2:59 a.m.5 views

hickory-proto: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses

The NSEC3 closest-encloser proof validation in hickory-proto's 0.25.0-alpha.3 ... 0.25.2 and hickory-net's 0.26.0-alpha.1 .. 0.26.0 DnssecDnsHandle walks from the QNAME up to the SOA owner name, building a list of candidate encloser names. The iterator used assumes the QNAME is a descendant of th...

5.8AI score
Exploits0References4Affected Software2
Positive Technologies
Positive Technologies
added 2026/05/07 12:0 a.m.3 views

PT-2026-38485

The NSEC3 closest-encloser proof validation in hickory-proto's 0.25.0-alpha.3 ... 0.25.2 and hickory-net's 0.26.0-alpha.1 .. 0.26.0 DnssecDnsHandle walks from the QNAME up to the SOA owner name, building a list of candidate encloser names. The iterator used assumes the QNAME is a descendant of th...

8.7CVSS5.8AI score
Exploits0References5
OSV
OSV
added 2026/05/01 12:0 p.m.0 views

RUSTSEC-2026-0120 NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses

The NSEC3 closest-encloser proof validation in hickory-net's DnssecDnsHandle walks from the QNAME up to the SOA owner name, building a list of candidate encloser names. The iterator used assumes the QNAME is a descendant of the SOA owner, terminating only when the current candidate equals the SOA...

5.8AI score
Exploits0References3
Cvelist
Cvelist
added 2026/02/06 9:32 a.m.22 views

CVE-2026-2013 itsourcecode Student Management System index.php sql injection

A vulnerability was identified in itsourcecode Student Management System 1.0. This affects an unknown function of the file /ramonsys/soa/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

7.5CVSS0.00013EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.3 views

MiracleLinux 4 : bind-dyndb-ldap-1.1.0-0.9.b1.0.2.AXS4 (AXSA:2012-800:03)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2012-800:03 advisory. This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP serve...

4.3CVSS6.6AI score0.01019EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 11:47 a.m.6 views

CVE-2010-0448

Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to obtain "unauthorized access to data" via unknown vectors...

5CVSS6.9AI score0.0051EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:43 a.m.4 views

CVE-2010-0450

Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote authenticated users to gain privileges via unknown vectors...

8.5CVSS7.2AI score0.00158EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:43 a.m.5 views

CVE-2010-0449

Cross-site scripting XSS vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

4.3CVSS5.9AI score0.00645EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:36 a.m.2 views

CVE-2017-12759

Ynet Interactive - http://demo.ynetinteractive.com/soa/ SOA School Management 3.0 is affected by: SQL Injection. The impact is: Code execution remote...

9.8CVSS7.9AI score0.00795EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:13 a.m.4 views

CVE-2019-2572

Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware subcomponent: Fabric Layer. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successful...

5.3CVSS5.3AI score0.00994EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/09 12:0 a.m.3 views

Siemens Ruggedcom ROX Buffer Over-read (CVE-2020-22217)

Buffer overflow vulnerability in c-ares before 1161 thru 1170 via function aresparsesoareply in aresparsesoareply.c. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

5.9CVSS7.5AI score0.00115EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2010-0481

Malware in sbrugna...

8.5CVSS6.4AI score0.00158EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2015-0427

Malware in sbrugna...

3.5CVSS5.6AI score0.00263EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-18041

Malware in sbrugna...

9.8CVSS9.2AI score0.0067EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-18044

Malware in sbrugna...

7.5CVSS8AI score0.00563EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2014-6427

Malware in sbrugna...

4.6CVSS5.6AI score0.00092EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2010-0480

Malware in sbrugna...

4.3CVSS6.4AI score0.00645EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-4298

Malware in sbrugna...

9.8CVSS9.5AI score0.00795EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-12212

Malware in sbrugna...

5.3CVSS5.9AI score0.00994EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2010-1638

Malware in sbrugna...

5CVSS6.4AI score0.01309EPSS
Exploits0References9
Rows per page
Query Builder