Lucene search
+L

4820 matches found

NVD
NVD
added 2022/03/25 3:15 p.m.17 views

CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

7.5CVSS0.05026EPSS
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2022/03/25 3:15 p.m.3 views

CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

7.5CVSS5.8AI score0.05026EPSS
SaveExploits0References14
UbuntuCve
UbuntuCve
added 2022/03/25 3:15 p.m.26 views

CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

7.5CVSS7.1AI score0.05026EPSS
SaveExploits0References8
OSV
OSV
added 2022/03/25 3:15 p.m.5 views

UBUNTU-CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

7.5CVSS7.1AI score0.05026EPSS
SaveExploits0References9
Prion
Prion
added 2022/03/25 3:15 p.m.23 views

Input validation

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

4.3CVSS7.4AI score0.05026EPSS
SaveExploits0References9Affected Software3
Cvelist
Cvelist
added 2022/03/25 2:41 p.m.40 views

CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

7.7AI score0.05026EPSS
SaveExploits0References9
AlpineLinux
AlpineLinux
added 2022/03/25 2:41 p.m.78 views

CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

7.5CVSS7.5AI score0.05026EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2022/03/25 2:41 p.m.86 views

CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

7.5CVSS7.5AI score0.05026EPSS
SaveExploits0
CVE
CVE
added 2022/03/25 2:41 p.m.354 views

CVE-2022-27227

CVE-2022-27227 affects PowerDNS, with the IXFR end-condition validation bug in both Authoritative Server (before 4.4.3, 4.5.x before 4.5.4, 4.6.x before 4.6.1) and Recursor (before 4.4.8, 4.5.x before 4.5.8, 4.6.x before 4.6.1). The issue allows an incomplete zone transfer to be misinterpreted as...

7.5CVSS7.3AI score0.05026EPSS
SaveExploits0References9Affected Software2
OSV
OSV
added 2022/03/25 2:41 p.m.31 views

CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

6.7AI score
SaveExploits0References11
CNNVD
CNNVD
added 2022/03/25 12:0 a.m.11 views

PowerDNS Authoritative Server输入验证错误漏洞

Powerdns PowerDNS Authoritative Server is a DNS server from the Dutch company PowerDNS Powerdns. PowerDNS Authoritative Server versions 4.4 before 4.4.3 and 4.5 before 4.5.4 and 4.6 before 4.6.1 and PowerDNS Recursor versions 4.4 before 4.4.8 and 4.5 before 4.5.8 and 4.6 before 4.6.1 suffer from ...

7.5CVSS7.3AI score0.05026EPSS
SaveExploits0References14
OSV
OSV
added 2022/03/23 11:9 a.m.11 views

ALBA-2022:1032 tzdata bug fix and enhancement update

The tzdata packages contain data files with rules for various time zones. The tzdata packages have been updated to version 2022a, which addresses recent time zone changes. Notably: In Palestine the daylight saving time DST starts on March 27, 2022, not on March 26. The zdump -v command now output...

7.4AI score
SaveExploits0References1
OSV
OSV
added 2022/03/18 12:25 a.m.7 views

GSD-2022-1000865 hwmon: Handle failure to register sensor with thermal zone correctly

hwmon: Handle failure to register sensor with thermal zone correctly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/03/18 12:15 a.m.22 views

GSD-2022-1000750 hwmon: Handle failure to register sensor with thermal zone correctly

hwmon: Handle failure to register sensor with thermal zone correctly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2022/03/17 12:0 a.m.41 views

ARRIS TR3300 Command Injection Vulnerability (CNVD-2022-68526)

ARRIS TR3300 is an 802.11ac Wi-Fi router from ARRIS U.S.A. A command injection vulnerability exists in ARRIS TR3300, which stems from the failure of the htimezone parameter in the time zone function to properly filter the construct command special characters, commands, etc. The vulnerability can ...

10CVSS4.3AI score0.0342EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/15 10:15 p.m.4 views

CVE-2022-27000

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the hprimaryntpserver, hbackupntpserver, and htimezone parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

10CVSS6.1AI score0.0342EPSS
SaveExploits1References2
NVD
NVD
added 2022/03/15 10:15 p.m.26 views

CVE-2022-27000

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the hprimaryntpserver, hbackupntpserver, and htimezone parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

10CVSS0.0342EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/15 10:15 p.m.8 views

CVE-2022-27000

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the hprimaryntpserver, hbackupntpserver, and htimezone parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

9.8CVSS7.5AI score0.0342EPSS
SaveExploits1References1
Prion
Prion
added 2022/03/15 10:15 p.m.16 views

Command injection

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the hprimaryntpserver, hbackupntpserver, and htimezone parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

10CVSS9.8AI score0.0342EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/03/15 9:56 p.m.29 views

CVE-2022-27000

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the hprimaryntpserver, hbackupntpserver, and htimezone parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

10AI score0.0342EPSS
SaveExploits1References1
Rows per page
Query Builder