Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
p1 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2013-3919
resolver.c in ISC BIND 9.8.5 prior to 9.8.5-P1, 9.9.3 prior to 9.9.3-P1, and 9.6-ESV-R9 prior to 9.6-ESV-R9-P1, when a recursive resolver is configured, allows remote malicious users to cause a denial of service (assertion failure and named daemon exit) via a query for a record i...
Isc Bind 9.9.3
Isc Bind 9.8.5
Isc Bind 9.6
1 Article
4.2
CVSSv3
CVE-2020-9690
Magento versions 2.3.5-p1 and previous versions, and 2.3.5-p1 and previous versions have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass.
Magento Magento 2.3.5
Magento Magento
6.5
CVSSv3
CVE-2020-9692
Magento versions 2.3.5-p1 and previous versions, and 2.3.5-p1 and previous versions have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
Magento Magento 2.3.5
Magento Magento
9.6
CVSSv3
CVE-2020-9691
Magento versions 2.3.5-p1 and previous versions, and 2.3.5-p1 and previous versions have a dom-based cross-site scripting vulnerability. Successful exploitation could lead to arbitrary code execution.
Magento Magento 2.3.5
Magento Magento
6.5
CVSSv3
CVE-2015-8605
ISC DHCP 4.x prior to 4.1-ESV-R12-P1, 4.2.x, and 4.3.x prior to 4.3.3-P1 allows remote malicious users to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.
Sophos Unified Threat Management Up2date
Isc Dhcp 4.1-esv
Isc Dhcp 4.2.2
Isc Dhcp 4.2.8
Isc Dhcp 4.2.7
Isc Dhcp 4.1.1
Isc Dhcp 4.2.4
Isc Dhcp 4.0.1
Isc Dhcp 4.2.1
Isc Dhcp 4.2.3
Isc Dhcp 4.3.2
Isc Dhcp 4.1.2
Isc Dhcp 4.3.3
Isc Dhcp 4.3.1
Isc Dhcp 4.2.0
Isc Dhcp 4.3.0
Isc Dhcp 4.0.3
Isc Dhcp 4.2.6
Isc Dhcp 4.2.5
Isc Dhcp 4.0.0
Isc Dhcp 4.0.2
Isc Dhcp 4.1.0
7.8
CVSSv3
CVE-2022-41741
NGINX Open Source prior to 1.23.2 and 1.22.1, NGINX Open Source Subscription prior to R2 P1 and R1 P1, and NGINX Plus prior to R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local malicious user to corrupt NGINX worker memory, resultin...
F5 Nginx Ingress Controller
F5 Nginx
F5 Nginx 1.23.1
F5 Nginx 1.23.0
F5 Nginx R2
F5 Nginx R1
Fedoraproject Fedora 35
Fedoraproject Fedora 36
Fedoraproject Fedora 37
Debian Debian Linux 10.0
Debian Debian Linux 11.0
1 Github repository
7.1
CVSSv3
CVE-2022-41742
NGINX Open Source prior to 1.23.2 and 1.22.1, NGINX Open Source Subscription prior to R2 P1 and R1 P1, and NGINX Plus prior to R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local malicious user to cause a worker process crash, or migh...
F5 Nginx Ingress Controller
F5 Nginx
F5 Nginx 1.23.1
F5 Nginx 1.23.0
F5 Nginx R2
F5 Nginx R1
Fedoraproject Fedora 35
Fedoraproject Fedora 36
Fedoraproject Fedora 37
Debian Debian Linux 10.0
Debian Debian Linux 11.0
NA
CVE-2013-6230
The Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV prior to 9.6-ESV-R10-P1, 9.8 prior to 9.8.6-P1, 9.9 prior to 9.9.4-P1, 9.9.3-S1, 9.9.4-S1, and other products, does not properly support the SIO_GET_INTERFACE_LIST command for netmask 255.255.2...
Isc Bind 9.9.3
Isc Bind 9.8.4
Isc Bind 9.8.1
Isc Bind 9.8.3
Isc Bind 9.9.0
Isc Bind 9.8.5
Isc Bind 9.8.2
Isc Bind 9.8.0
Isc Bind 9.9.4
Isc Bind 9.9.1
Isc Bind 9.8.6
Isc Bind 9.9.2
Isc Bind 9.6
NA
CVE-2004-1471
Format string vulnerability in wrapper.c in CVS 1.12.x up to and including 1.12.8, and 1.11.x up to and including 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string spec...
Openpkg Openpkg 2.0
Cvs Cvs 1.11.14
Cvs Cvs 1.11.1
Cvs Cvs 1.11
Cvs Cvs 1.12.2
Cvs Cvs 1.11.4
Cvs Cvs 1.12.7
Sgi Propack 3.0
Cvs Cvs 1.12.5
Openpkg Openpkg 1.3
Cvs Cvs 1.11.16
Cvs Cvs 1.11.5
Cvs Cvs 1.10.8
Cvs Cvs 1.11.15
Cvs Cvs 1.11.11
Openpkg Openpkg Current
Cvs Cvs 1.12.8
Cvs Cvs 1.11.6
Cvs Cvs 1.12.1
Cvs Cvs 1.11.3
Cvs Cvs 1.11.2
Cvs Cvs 1.11.10
1 EDB exploit
NA
CVE-2010-0218
ISC BIND 9.7.2 up to and including 9.7.2-P1 uses an incorrect ACL to restrict the ability of Recursion Desired (RD) queries to access the cache, which allows remote malicious users to obtain potentially sensitive information via a DNS query.
Isc Bind 9.7.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
4
5
6
7
8
9
10
NEXT »