Monthly
NLnet Labs Unbound through 1.26.1 can expose a cache-level side-channel when operators explicitly configure unwanted-reply-threshold greater than 0, a non-default setting. An external observer who can send response-like UDP datagrams to the resolver’s current upstream source port can use the resulting RRset/message-cache clear as an oracle to test whether a candidate port is in use; by keeping a concurrent query window open and then performing birthday-style TXID guessing, this can become a feasible cache-poisoning path. The issue is assessed as low-to-moderate risk, with no public exploit identified at time of analysis.
A vulnerability, which was classified as problematic, was found in spa-cartcms 1.9.0.6. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.
An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to obtain sensitive system information via unspecified vectors. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 29.5%.
NLnet Labs Unbound through 1.26.1 can expose a cache-level side-channel when operators explicitly configure unwanted-reply-threshold greater than 0, a non-default setting. An external observer who can send response-like UDP datagrams to the resolver’s current upstream source port can use the resulting RRset/message-cache clear as an oracle to test whether a candidate port is in use; by keeping a concurrent query window open and then performing birthday-style TXID guessing, this can become a feasible cache-poisoning path. The issue is assessed as low-to-moderate risk, with no public exploit identified at time of analysis.
A vulnerability, which was classified as problematic, was found in spa-cartcms 1.9.0.6. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.
An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to obtain sensitive system information via unspecified vectors. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 29.5%.