4820 matches found
Heap overflow
When ldns version 1.7.1 verifies a zone file, the ldnsrrnewfrmstrinternal function has a heap out of bounds read vulnerability. An attacker can leak information on the heap by constructing a zone file payload...
UBUNTU-CVE-2020-19860
When ldns version 1.7.1 verifies a zone file, the ldnsrrnewfrmstrinternal function has a heap out of bounds read vulnerability. An attacker can leak information on the heap by constructing a zone file payload...
CVE-2020-19860
When ldns version 1.7.1 verifies a zone file, the ldnsrrnewfrmstrinternal function has a heap out of bounds read vulnerability. An attacker can leak information on the heap by constructing a zone file payload...
CVE-2020-19860
When ldns version 1.7.1 verifies a zone file, the ldnsrrnewfrmstrinternal function has a heap out of bounds read vulnerability. An attacker can leak information on the heap by constructing a zone file payload...
Nlnet Labs ldns 缓冲区错误漏洞
NLnet Labs ldns is a DNS library from the NLnet Labs Nlnet Labs Foundation in the Netherlands that facilitates the programming of DNS tools. A security vulnerability exists in Nlnet Labs ldns that stems from ldns parsing a zone file with the function ldnsnsec3saltdata being too trustworthy for...
NLnet Labs ldns 缓冲区错误漏洞
NLnet Labs ldns is a DNS library from the NLnet Labs Nlnet Labs Foundation in the Netherlands that facilitates the programming of DNS tools. A security vulnerability exists in Nlnet Labs ldns that stems from a heap out-of-bounds read vulnerability in the ldnsrrnewfrmstrinternal function when...
CVE-2021-46351
There is an Assertion 'localtza == ecmadatelocaltimezoneadjustment datevalue' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.cecmabuiltindateprototypedispatchset:421 in JerryScript 3.0.0...
CVE-2021-46346
There is an Assertion 'localtza == ecmadatelocaltimezoneadjustment datevalue' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.cecmabuiltindateprototypedispatchset:421 in JerryScript 3.0.0...
UBUNTU-CVE-2021-46346
There is an Assertion 'localtza == ecmadatelocaltimezoneadjustment datevalue' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.cecmabuiltindateprototypedispatchset:421 in JerryScript 3.0.0...
PT-2022-18313 · Powerdns +5 · Powerdns Recursor +6
Name of the Vulnerable Software and Affected Versions: PowerDNS Authoritative Server versions 4.4.2 and earlier, 4.5.x before 4.5.4, 4.6.x before 4.6.1 PowerDNS Recursor versions 4.4.7 and earlier, 4.5.x before 4.5.8, 4.6.x before 4.6.1 Description: The issue is caused by insufficient validation ...
CVE-2018-5743
A flaw was found in the way bind implemented tunable which limited simultaneous TCP client connections. A remote attacker could use this flaw to exhaust the pool of file descriptors available to named, potentially affecting network connections and the management of files such as log files or zone...
Mobile Events Manager < 1.4.4 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape various of its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed PoC Payload used: - Put the payload in the TMEM Events Settings Events Event prefix field, then Create an...
Mobile Events Manager < 1.4.4 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape various of its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed Payload used: alert/XSS/ - Put the payload in the TMEM Events Settings Events Event prefix field, then Creat...
SUSE: Security Advisory (SUSE-SU-2021:4063-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2021:4063-1 Security update for icu.691
This update for icu.691 fixes the following issues: - Renamed package from icu 69.1 for SUSE:SLE-15-SP3:Update. jscSLE-17893 - Fix undefined behaviour in 'ComplexUnitsConverter::applyRounder' - Update to release 69.1 - For Norwegian, 'no' is back to being the canonical code, with 'nb' treated as...
Cloudflare Public Bug Bounty: Hijack all emails sent to any domain that uses Cloudflare Email Forwarding
The Email Routing feature enables Cloudflare users to create any number of custom email addresses and route all incoming messages to the user's preferred inboxes. Due to a bug in zone ownership verification, it was possible to configure Email Routing to redirect e-mail messages for an unverified...
The vulnerability of the implementation of the firewall function on Cisco IOS XE operating systems allows a hacker to bypass security restrictions.
The vulnerability of the Zone-Based Policy Firewall’s firewall function in Cisco IOS XE operating systems is related to deficiencies in access control when configuring Unified Threat Defense UTD or Application Quality of Experience AppQoE settings. Exploiting this vulnerability allows a malicious...
bind: Broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly
Incremental zone transfers IXFR provide a way of transferring changed portions of a zone between servers. An IXFR stream containing SOA records with an owner name other than the transferred zone's apex may cause the receiving named server to inadvertently remove the SOA record for the zone in...
bind security and bug fix update
An update is available for bind. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Berkeley Internet Name Domain BIND is an implementation of the Domain Name...