Riasztások
26 Jul 2024
NA - CVE-2024-7114 - A vulnerability was found in Tianchoy Blog up...
A vulnerability was found in Tianchoy Blog up to 1.8.8. It has been classified as critical. This affects an unknown part of the file /so.php. The manipulation of the argument search leads to sql...
26 Jul 2024
NA - CVE-2024-7115 - A vulnerability was found in MD-MAFUJUL-HASAN...
A vulnerability was found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. It has been declared as critical. This vulnerability affects unknown code of the file...
26 Jul 2024
NA - CVE-2024-7116 - A vulnerability was found in MD-MAFUJUL-HASAN...
A vulnerability was found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. It has been rated as critical. This issue affects some unknown processing of the file...
26 Jul 2024
NA - CVE-2024-7117 - A vulnerability classified as critical has been...
A vulnerability classified as critical has been found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. Affected is an unknown function of the file /shift_viewmore.php. The...
26 Jul 2024
NA - CVE-2024-7118 - A vulnerability classified as critical was...
A vulnerability classified as critical was found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. Affected by this vulnerability is an unknown functionality of the file...
25 Jul 2024
CVE-2024-0760 - A Flood Of DNS Messages Over TCP May Make The Server Unstable
A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. This issue affects...
25 Jul 2024
CVE-2024-1737 - BIND's Database Will Be Slow If A Very Large Number Of RRs Exist At The Same Name
A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. This issue affects...
25 Jul 2024
CVE-2024-1975 - SIG(0) Can Be Used To Exhaust CPU Resources
If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of SIG(0) signed requests. This...
25 Jul 2024
CVE-2024-4076 - Assertion Failure When Serving Both Stale Cache Data And Authoritative Zone Content
Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This issue affects BIND 9 versions 9.16.13 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19...
25 Jul 2024
NA - CVE-2024-24621 - Softaculous Webuzo contains an authentication...
Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulnerability to gain full server access as...