Lucene search
K

10 matches found

Circl
Circl
added 2025/12/12 8:9 a.m.1 views

CVE-2025-14049

creationtimestamp| type| source ---|---|--- 2025-12-12 08:09:35+00:00| seen| https://gist.github.com/Darkcrai86/0e485f7c69e61a85771d8ba70f444b38...

6.1CVSS5.7AI score0.00138EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:19 p.m.4 views

CVE-2020-14049

Viber for Windows up to 13.2.0.39 does not properly quote its custom URI handler. A malicious website could launch Viber with arbitrary parameters, forcing a victim to send an NTLM authentication request, and either relay the request or capture the hash for offline password cracking. NOTE: this...

9.3CVSS7.4AI score0.0322EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 8:17 a.m.6 views

CVE-2019-14049

Stage-2 fault will occur while writing to an ION system allocation which has been assigned to non-HLOS memory which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdrag...

7.8CVSS7.2AI score0.00033EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/06/22 5:27 p.m.9 views

CVE-2020-14049

Viber for Windows up to 13.2.0.39 does not properly quote its custom URI handler. A malicious website could launch Viber with arbitrary parameters, forcing a victim to send an NTLM authentication request, and either relay the request or capture the hash for offline password cracking. NOTE: this...

7.9AI score0.00548EPSS
Exploits1References2
CVE
CVE
added 2020/06/22 5:27 p.m.49 views

CVE-2020-14049

Viber for Windows up to 13.2.0.39 is affected by an issue in its custom URI handler due to improper quoting, connected to an incomplete fix for CVE-2019-12569. A malicious site could launch Viber with arbitrary parameters, forcing a victim to initiate an NTLM authentication request, potentially r...

7.5CVSS7.8AI score0.00548EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2020/02/07 5:15 a.m.12 views

CVE-2019-14049

Stage-2 fault will occur while writing to an ION system allocation which has been assigned to non-HLOS memory which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdrag...

7.8CVSS7.7AI score0.00033EPSS
Exploits0References1
CVE
CVE
added 2020/02/07 5:0 a.m.99 views

CVE-2019-14049

CVE-2019-14049 describes a Stage-2 fault during writes to an ION system allocation assigned to non-HLOS memory in Qualcomm-based Snapdragon platforms (across multiple product lines such as Snapdragon Auto/Compute/Mobile) with non-standard memory usage. The flaw is presented as a memory/write-proc...

7.8CVSS7.6AI score0.00033EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2018/07/13 4:0 p.m.38 views

CVE-2018-14049

Summary: CVE-2018-14049 affects the libwav WAV encoding library (C) up to 2017-04-20. The issue is a segmentation fault in the function print_info located at wav_info/wav_info.c, which can trigger a crash (denial of service). The connected Red Hat/CNVD entries corroborate a SEGV in libwav’s print...

6.5CVSS6.5AI score0.00285EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2017/08/31 4:29 a.m.10 views

CVE-2017-14049

In BlackCat CMS 1.2, backend/settings/ajaxsavesettings.php allows remote authenticated users to conduct XSS attacks via the Website header or Website footer field...

5.4CVSS5.1AI score0.0014EPSS
Exploits0References1
Cvelist
Cvelist
added 2017/08/31 4:0 a.m.10 views

CVE-2017-14049

In BlackCat CMS 1.2, backend/settings/ajaxsavesettings.php allows remote authenticated users to conduct XSS attacks via the Website header or Website footer field...

5.1AI score0.0014EPSS
Exploits0References1
Rows per page
Query Builder