2182 matches found
CVE-2021-46837
CVE-2021-46837 affects res_pjsip_t38 in Sangoma Asterisk 16.x prior to 16.16.2, 17.x prior to 17.9.3, 18.x prior to 18.2.2, and Certified Asterisk before 16.8-cert7. A crash can be triggered by an m=image line with zero port in a response to a T.38 re-invite initiated by Asterisk; the crash is du...
CVE-2021-46837
respjsipt38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7, allows an attacker to trigger a crash by sending an m=image line and zero port in a response to a T.38 re-invite initiated by Asterisk. This is a re-occurrenc...
Ubuntu: Security Advisory (USN-38-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-20245
creationtimestamp| type| source ---|---|--- 2022-08-11 18:38:23+00:00| seen| https://t.me/cibsecurity/47994...
CVE-2022-28690
creationtimestamp| type| source ---|---|--- 2022-06-02 18:38:48+00:00| seen| https://t.me/cibsecurity/43712...
CVE-2022-30999
creationtimestamp| type| source ---|---|--- 2022-06-02 18:38:46+00:00| seen| https://t.me/cibsecurity/43710...
CVE-2022-30697
creationtimestamp| type| source ---|---|--- 2022-05-16 22:26:38+00:00| seen| https://t.me/cibsecurity/42771...
CVE-2022-28471
In ffjpeg commit hash: caade60, the function bmpload in bmp.c contains an integer overflow vulnerability, which eventually results in the heap overflow in jfifencode in jfif.c. This is due to the incomplete patch for issue 38...
haidenbauer.com Cross Site Scripting vulnerability OBB-2525738
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-29020
creationtimestamp| type| source ---|---|--- 2022-04-16 07:20:38+00:00| seen| https://t.me/cibsecurity/40978...
bodaantik.hu Cross Site Scripting vulnerability OBB-2507584
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Chinese Hacker Groups Continue to Target Indian Power Grid Assets
China-linked adversaries have been attributed to an ongoing onslaught against Indian power grid organizations, one year after a concerted campaign targeting critical infrastructure in the country came to light. Most of the intrusions involved a modular backdoor named ShadowPad, according to...
Denial Of Service (DoS)
asterisk is vulnerable to denial of service DoS attacks. A null pointer dereference in chansip while handling SDP negotiation allows an attacker to crash the system when handling an SDP answer to an outgoing T.38 re-invite...
Denial Of Service (DoS)
Sangoma Asterisk is vulnerable to denial of service. The vulnerability exists because it receives a re-invite initiating T.38 faxing and has a port of 0 and no c line in the SDP resulting an application crash...
AZL-43675 CVE-2018-25032 affecting package clucene 2.3.3.4-38
zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...
saarstahl.de Cross Site Scripting vulnerability OBB-2366624
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Mageia: Security Advisory (MGASA-2016-0291)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-21344
creationtimestamp| type| source ---|---|--- 2022-01-19 14:38:53+00:00| seen| https://t.me/cibsecurity/35832...
SnatchCrypto campaign carried out by North Korean APT 38 subsidiary BlueNoroff
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here. BlueNoroff, an advanced persistent threat APT group thats part of the larger Lazarus Group associated with North Korea, is behind a series of attacks against small and medium-sized companies that have led to serious...
kop234k.com Cross Site Scripting vulnerability OBB-2325078
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...