60.267 CVE seguite
809 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
Ricerca: dns
441 CVE
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2026-58275 | CRIT 10.0 | microsoft azure_dns Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network. | 0,9% | — |
| CVE-2026-70244 | MED 6.5 | microsoft windows_10_1607 Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2022-20844 | MED 5.3 | cisco sd-wan A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an unauthenticated, remote attacker to access the GUI of Cisco SD-AVC using a default static username and password co | 0,9% | — |
| CVE-2022-23017 | HIGH 7.5 | f5 big-ip_access_policy_manager On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when a virtual server is configured with a DNS profile with the Rapid Response Mode setting enabled and is configured on a BIG-IP system, undisclo | 0,9% | — |
| CVE-2026-83889 | HIGH 8.8 | microsoft windows_10_1607 Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network. | 0,9% | — |
| CVE-2026-69551 | HIGH 8.8 | microsoft windows_10_1607 Use after free in Windows DNS allows an authorized attacker to execute code over a network. | 0,9% | — |
| CVE-2026-97844 | MED 6.5 | microsoft windows_10_1607 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-97843 | MED 6.5 | microsoft windows_10_1607 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-97831 | MED 6.5 | microsoft windows_10_1607 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2022-26372 | HIGH 7.5 | f5 big-ip_access_policy_manager On F5 BIG-IP 15.1.x versions prior to 15.1.0.2, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when a DNS listener is configured on a virtual server with DNS queueing (default), undisclosed requests c | 0,9% | — |
| CVE-2003-1579 | MED 4.3 | sun one_web_server Sun ONE (aka iPlanet) Web Server 6 on Windows, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether a dotted quad represents an unresolved IP address, which allows remote attackers to spoof IP addresses v | 0,9% | — |
| CVE-2020-11582 | HIGH 8.8 | pulsesecure pulse_connect_secure An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06. The applet in tncc.jar, executed on macOS, Linux, and Solaris clients when a Host Checker policy is enforced, launches a TCP server that accepts local connections on a rando | 0,9% | — |
| CVE-2017-6134 | MED 6.5 | f5 big-ip_access_policy_manager In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, 12.1.0 - 12.1.2 and 11.5.1 - 11.6.1, an undisclosed sequence of packets, sourced from an adjacent network may cause TMM to crash. | 0,9% | — |
| CVE-2023-28308 | MED 6.6 | microsoft windows_server_2008 Windows DNS Server Remote Code Execution Vulnerability | 0,9% | — |
| CVE-2023-28307 | MED 6.6 | microsoft windows_server_2008 Windows DNS Server Remote Code Execution Vulnerability | 0,9% | — |
| CVE-2023-28306 | MED 6.6 | microsoft windows_server_2008 Windows DNS Server Remote Code Execution Vulnerability | 0,9% | — |
| CVE-2023-28305 | MED 6.6 | microsoft windows_server_2008 Windows DNS Server Remote Code Execution Vulnerability | 0,9% | — |
| CVE-2023-28278 | MED 6.6 | microsoft windows_server_2008 Windows DNS Server Remote Code Execution Vulnerability | 0,9% | — |
| CVE-2026-70167 | HIGH 8.8 | microsoft windows_server_2022 Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network. | 0,9% | — |
| CVE-2023-28256 | MED 6.6 | microsoft windows_server_2008 Windows DNS Server Remote Code Execution Vulnerability | 0,8% | — |
| CVE-2023-28255 | MED 6.6 | microsoft windows_server_2008 Windows DNS Server Remote Code Execution Vulnerability | 0,8% | — |
| CVE-2020-5944 | MED 4.3 | f5 big-iq_centralized_management In BIG-IQ 7.1.0, accessing the DoS Summary events and DNS Overview pages in the BIG-IQ system interface returns an error message due to disabled Grafana reverse proxy in web service configuration. F5 has done further review of this vulnerability and has re-cla | 0,8% | — |
| CVE-2022-20830 | MED 5.3 | cisco catalyst_sd-wan_manager A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an unauthenticated, remote attacker to access the GUI of Cisco SD-AVC without authentication. This vulnerability exis | 0,8% | — |
| CVE-2026-83642 | HIGH 8.8 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network. | 0,8% | — |
| CVE-2022-28706 | MED 5.9 | f5 big-ip_access_policy_manager On F5 BIG-IP 16.1.x versions prior to 16.1.2 and 15.1.x versions prior to 15.1.5.1, when the DNS resolver configuration is used, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached En | 0,8% | — |