Skip to content
OpenAdvisories

Archive

17 June 2020

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Medium 4.9

    A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer

    An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients.

  • Medium 4.9

    A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer

    In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone contains …

  • Medium 5.3

    IBM Business Automation Workflow and IBM Business Process Manager (IBM Business Process Manager Express 8.5.5, 8.5.6, 8…

  • Medium 5.7

    OMERO-web Sensitive Data Exposure

    OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to be passed as URL query parameters. If an attacker tricks a user into clicking a malicious link in OMERO.web, the information in the query parameters may be exposed in th…

  • Medium 5.4
    CVE-2020-11899 Exploited EPSS 18%

    The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

    KEV Mar 3, 2022