Lucene search
+L

5666 matches found

osv_cve
osv_cve
•added 2022/03/25 11:15 p.m.•42 views

CVE-2021-40906

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

6.1CVSS5.7AI score
SaveExploits0References1
NVD
NVD
•added 2022/03/25 11:15 p.m.•44 views

CVE-2021-40906

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

6.1CVSS0.00989EPSS
SaveExploits1References1
Prion
Prion
•added 2022/03/25 11:15 p.m.•35 views

Authentication flaw

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

4.3CVSS5.8AI score0.00989EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
•added 2022/03/25 11:15 p.m.•45 views

CVE-2021-40906

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

6.1CVSS6.4AI score0.00989EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/03/25 10:20 p.m.•55 views

CVE-2021-40906

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

6.1AI score0.00989EPSS
SaveExploits1References1
NVD
NVD
•added 2022/03/25 3:15 p.m.•23 views

CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

7.5CVSS0.05004EPSS
SaveExploits0References9
attackerkb
attackerkb
•added 2022/03/25 3:15 p.m.•10 views

CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

7.5CVSS5.8AI score0.05004EPSS
SaveExploits0References14
osv_ubuntu
osv_ubuntu
•added 2022/03/25 3:15 p.m.•11 views

UBUNTU-CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

7.5CVSS7.1AI score0.05004EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2022/03/25 3:15 p.m.•31 views

CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

7.5CVSS7.1AI score0.05004EPSS
SaveExploits0References8
Prion
Prion
•added 2022/03/25 3:15 p.m.•26 views

Input validation

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

4.3CVSS7.4AI score0.05004EPSS
SaveExploits0References9Affected Software3
osv_cve
osv_cve
•added 2022/03/25 2:41 p.m.•35 views

CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

6.7AI score
SaveExploits0References11
Mend
Mend
•added 2022/03/25 2:41 p.m.•6 views

CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

8.7CVSS0.05004EPSS
SaveExploits0References17
Cvelist
Cvelist
•added 2022/03/25 2:41 p.m.•49 views

CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

7.7AI score0.05004EPSS
SaveExploits0References9
CVE
CVE
•added 2022/03/25 2:41 p.m.•375 views

CVE-2022-27227

CVE-2022-27227 affects PowerDNS, with the IXFR end-condition validation bug in both Authoritative Server (before 4.4.3, 4.5.x before 4.5.4, 4.6.x before 4.6.1) and Recursor (before 4.4.8, 4.5.x before 4.5.8, 4.6.x before 4.6.1). The issue allows an incomplete zone transfer to be misinterpreted as...

7.5CVSS7.3AI score0.05004EPSS
SaveExploits0References9Affected Software2
Debian CVE
Debian CVE
•added 2022/03/25 2:41 p.m.•100 views

CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

7.5CVSS7.5AI score0.05004EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/03/25 2:41 p.m.•88 views

CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

7.5CVSS7.5AI score0.05004EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/25 12:00 a.m.•6 views

CVE-2022-27227: Undefined Security Weakness

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

7.5CVSS7.4AI score0.05004EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/03/25 12:00 a.m.•24 views

PowerDNS Authoritative Server输入验证错误漏洞

Powerdns PowerDNS Authoritative Server is a DNS server from the Dutch company PowerDNS Powerdns. PowerDNS Authoritative Server versions 4.4 before 4.4.3 and 4.5 before 4.5.4 and 4.6 before 4.6.1 and PowerDNS Recursor versions 4.4 before 4.4.8 and 4.5 before 4.5.8 and 4.6 before 4.6.1 suffer from ...

7.5CVSS7.3AI score0.05004EPSS
SaveExploits0References14
osv_alba
osv_alba
•added 2022/03/23 11:09 a.m.•17 views

ALBA-2022:1032 tzdata bug fix and enhancement update

The tzdata packages contain data files with rules for various time zones. The tzdata packages have been updated to version 2022a, which addresses recent time zone changes. Notably: In Palestine the daylight saving time DST starts on March 27, 2022, not on March 26. The zdump -v command now output...

7.4AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/23 12:00 a.m.•5 views

PT-2022-38158

Уязвимость функции btrfs can activate zone модуля fs/btrfs/zoned.c файловой системы btrfs ядра операционной системы Linux связана с распределением ресурсов без ограничений и регулирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

5.5CVSS5.8AI score0.00184EPSS
SaveExploits0References8
Rows per page
Query Builder