60.267 CVE seguite
809 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
Ricerca: dns
441 CVE
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2022-28708 | MED 5.9 | f5 big-ip_access_policy_manager On F5 BIG-IP 16.1.x versions prior to 16.1.2.2 and 15.1.x versions prior to 15.1.5.1, when a BIG-IP DNS resolver-enabled, HTTP-Explicit or SOCKS profile is configured on a virtual server, an undisclosed DNS response can cause the Traffic Management Microkernel | 0,8% | — |
| CVE-2020-5935 | MED 5.9 | f5 big-ip_access_policy_manager On BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, FPS, GTM, Link Controller, PEM) versions 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when handling MQTT traffic through a BIG-IP virtual server associated with an MQTT profile and an iRule performi | 0,8% | — |
| CVE-2020-27725 | MED 4.3 | f5 big-ip_domain_name_system In version 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2 of BIG-IP DNS, GTM, and Link Controller, zxfrd leaks memory when listing DNS zones. Zones can be listed via TMSH, iControl or SNMP; only users with access to those | 0,8% | — |
| CVE-2022-23013 | HIGH 8.8 | f5 big-ip_domain_name_system On BIG-IP DNS & GTM version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, a DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility | 0,8% | — |
| CVE-2026-97834 | MED 6.5 | microsoft windows_10_1607 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 0,8% | — |
| CVE-2026-97833 | MED 6.5 | microsoft windows_10_1607 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 0,8% | — |
| CVE-2026-97832 | MED 6.5 | microsoft windows_10_1607 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 0,8% | — |
| CVE-2026-50487 | HIGH 8.1 | microsoft windows_11_24h2 Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network. | 0,8% | — |
| CVE-2026-88122 | MED 6.5 | microsoft windows_server_2012 Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | 0,8% | — |
| CVE-2016-2084 | HIGH 7.4 | f5 big-ip_access_policy_manager F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP AAM 11.4. | 0,8% | — |
| CVE-2020-1660 | HIGH 8.3 | juniper junos When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the Multiservices PIC Management Daemon (mspmand) process, responsible for managing "URL Filt | 0,8% | — |
| CVE-2018-5538 | LOW 3.7 | f5 big-ip_domain_name_system On F5 BIG-IP DNS 13.1.0-13.1.0.7, 12.1.3-12.1.3.5, DNS Express / DNS Zones accept NOTIFY messages on the management interface from source IP addresses not listed in the 'Allow NOTIFY From' configuration parameter when the db variable "dnsexpress.notifyport" is | 0,8% | — |
| CVE-2026-97842 | MED 6.5 | microsoft windows_10_1607 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 0,8% | — |
| CVE-2026-49268 | CRIT 9.1 | apache shiro A remote attacker can inject LDAP special characters into the Distinguished Name (DN) construction in DefaultLdapRealm class. User-supplied username input is directly concatenated into the LDAP DN template without any escaping of RFC 2253 special characters. T | 0,8% | — |
| CVE-2026-49169 | HIGH 8.0 | microsoft windows_server_2025 Use after free in DNS Server allows an authorized attacker to execute code over a network. | 0,8% | — |
| CVE-2024-36471 | HIGH 7.5 | apache allura Import functionality is vulnerable to DNS rebinding attacks between verification and processing of the URL. Project administrators can run these imports, which could cause Allura to read from internal services and expose them. This issue affects Apache Allur | 0,8% | — |
| CVE-2024-36031 | CRIT 9.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: keys: Fix overwrite of key expiration on instantiation The expiry time of a key is unconditionally overwritten during instantiation, defaulting to turn it permanent. This causes a problem fo | 0,7% | — |
| CVE-2022-0023 | MED 5.9 | paloaltonetworks pan-os An improper handling of exceptional conditions vulnerability exists in the DNS proxy feature of Palo Alto Networks PAN-OS software that enables a meddler-in-the-middle (MITM) to send specifically crafted traffic to the firewall that causes the service to resta | 0,7% | — |
| CVE-2022-41787 | HIGH 7.5 | f5 big-ip_domain_name_system In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS queries with DNSSEC can | 0,7% | — |
| CVE-2022-33947 | MED 5.4 | f5 big-ip_domain_name_system In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, a vulnerability exists in undisclosed pages of the BIG-IP DNS Traffic Management User Interface (TMUI) that allows an authenticated attacker with | 0,7% | — |
| CVE-2026-70127 | HIGH 8.1 | microsoft windows_10_1607 Use after free in DNS Server allows an unauthorized attacker to execute code over a network. | 0,7% | — |
| CVE-2026-77505 | HIGH 8.1 | microsoft windows_10_1607 Use after free in DNS Server allows an unauthorized attacker to execute code over a network. | 0,7% | — |
| CVE-2026-72987 | HIGH 8.1 | microsoft windows_10_1607 Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. | 0,7% | — |
| CVE-2026-69989 | HIGH 8.1 | microsoft windows_10_1607 Use after free in DNS Server allows an unauthorized attacker to execute code over a network. | 0,7% | — |
| CVE-2026-69858 | HIGH 8.1 | microsoft windows_server_2022 Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. | 0,7% | — |