dproxy-nexgen project kayıtları
dproxy-nexgen project üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-290 Authentication Bypass by Spoofing1
- CWE-331 Insufficient Entropy1
- CWE-406 Insufficient Control of Network Message Volume (Network Amplification)1
- CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
32İzleyin | CVE-2024-2169Kavram kanıtı | Implementations of UDP application protocols are susceptible to network loops and denial of servicemikrotik · routeros-tftp · CWE-406 | Yüksek7,5 | — | %5,3 | 19 Mar 2024 |
30İzleyin | CVE-2022-33990İstismar yok | Misinterpretation of special domain name characters in dproxy-nexgen (aka dproxy nexgen) leads to cache poisoning because domain names and tdproxy-nexgen project · dproxy-nexgen | Yüksek7,5 | — | %1,2 | 15 Ağu 2022 |
30İzleyin | CVE-2022-33988İstismar yok | dproxy-nexgen (aka dproxy nexgen) re-uses the DNS transaction id (TXID) value from client queries, which allows attackers (able to send querdproxy-nexgen project · dproxy-nexgen · CWE-444 | Yüksek7,5 | — | %1,2 | 15 Ağu 2022 |
21İzleyin | CVE-2022-33989İstismar yok | dproxy-nexgen (aka dproxy nexgen) uses a static UDP source port (selected randomly only at boot time) in upstream queries sent to DNS resolvdproxy-nexgen project · dproxy-nexgen · CWE-331 | Orta5,3 | — | %1,0 | 15 Ağu 2022 |
21İzleyin | CVE-2022-33991İstismar yok | dproxy-nexgen (aka dproxy nexgen) forwards and caches DNS queries with the CD (aka checking disabled) bit set to 1.dproxy-nexgen project · dproxy-nexgen · CWE-290 | Orta5,3 | — | %0,9 | 15 Ağu 2022 |
- CVE-2024-216932İzleyin
Implementations of UDP application protocols are susceptible to network loops and denial of service
YüksekCVSS 7,5Kavram kanıtıEPSS %5mikrotik · routeros-tftp19 Mar 2024
- CVE-2022-3399030İzleyin
Misinterpretation of special domain name characters in dproxy-nexgen (aka dproxy nexgen) leads to cache poisoning because domain names and t
YüksekCVSS 7,5İstismar yokEPSS %1dproxy-nexgen project · dproxy-nexgen15 Ağu 2022
- CVE-2022-3398830İzleyin
dproxy-nexgen (aka dproxy nexgen) re-uses the DNS transaction id (TXID) value from client queries, which allows attackers (able to send quer
YüksekCVSS 7,5İstismar yokEPSS %1dproxy-nexgen project · dproxy-nexgen15 Ağu 2022
- CVE-2022-3398921İzleyin
dproxy-nexgen (aka dproxy nexgen) uses a static UDP source port (selected randomly only at boot time) in upstream queries sent to DNS resolv
OrtaCVSS 5,3İstismar yokEPSS %1dproxy-nexgen project · dproxy-nexgen15 Ağu 2022
- CVE-2022-3399121İzleyin
dproxy-nexgen (aka dproxy nexgen) forwards and caches DNS queries with the CD (aka checking disabled) bit set to 1.
OrtaCVSS 5,3İstismar yokEPSS %0dproxy-nexgen project · dproxy-nexgen15 Ağu 2022