Lucene search
+L

8692 matches found

CNNVD
CNNVD
added 2022/08/12 12:00 a.m.10 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Google Android Telephony component, which stems from a lack of privilege checking and could potentially disclose ICCID and EID...

5.5CVSS5.7AI score0.00095EPSS
SaveExploits0References2
CVE
CVE
added 2022/08/11 3:27 p.m.75 views

CVE-2022-20326

CVE-2022-20326 affects Android 13 Telephony: a missing permission check allows disclosure of SIM identifiers via local information disclosure with low privileges and no user interaction. The issue is categorized as Information Disclosure/Telephony, with impact limited to confidential data exposur...

5.5CVSS5.5AI score0.00095EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/08/11 12:00 a.m.8 views

Library Management System 跨站脚本漏洞

Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Individual Developer. A cross-site scripting vulnerability exists in Library Management System, which stems from unknown code in the file /qr/I/ being affected,...

6.1CVSS5.8AI score0.00403EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/08/10 12:00 a.m.15 views

Intel PROSet/Wireless WiFi Software 缓冲区错误漏洞

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel Corporation USA. A security vulnerability exists in Intel PROSet/Wireless WiFi Software that originates from improper buffer limiting...

7.5CVSS7.5AI score0.00826EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/08/05 4:15 p.m.4 views

CVE-2022-33724

Exposure of Sensitive Information in Samsung Dialer application?prior to SMR Aug-2022 Release 1 allows local attackers to access ICCID via log...

3.3CVSS5.8AI score0.00063EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/05 4:15 p.m.9 views

CVE-2022-33724

Exposure of Sensitive Information in Samsung Dialer application?prior to SMR Aug-2022 Release 1 allows local attackers to access ICCID via log...

3.3CVSS5.8AI score0.00063EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/08/05 12:00 a.m.9 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. SAMSUNG Mobile devices A security vulnerability exists in versions prior to Samsung Dialer SMR Aug-2022 Release 1, which stems from the presence of secretly...

3.3CVSS5AI score0.00063EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/08/04 10:15 a.m.5 views

CVE-2022-2652

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request reproduce e.g. with many %s modifiers in a row...

7.3CVSS6.8AI score0.00334EPSS
SaveExploits1References3
OSV
OSV
added 2022/08/04 10:15 a.m.5 views

DEBIAN-CVE-2022-2652

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request reproduce e.g. with many %s modifiers in a row...

6CVSS6.5AI score0.00334EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2022/08/04 10:15 a.m.41 views

CVE-2022-2652

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request reproduce e.g. with many %s modifiers in a row...

7.3CVSS6.8AI score0.00334EPSS
SaveExploits1References3
OSV
OSV
added 2022/08/04 10:15 a.m.19 views

UBUNTU-CVE-2022-2652

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request reproduce e.g. with many %s modifiers in a row...

7.3CVSS5.8AI score0.00334EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/08/04 12:00 a.m.12 views

PT-2022-17916 · Unknown +3 · V4L2Loopback +3

Name of the Vulnerable Software and Affected Versions: v4l2loopback affected versions not specified Description: The issue allows for potential kernel stack memory leakage due to improperly crafted format strings in the card label. Additionally, there is a possibility of a Denial of Service DoS...

7.3CVSS7.1AI score0.00334EPSS
SaveExploits1References21
CNNVD
CNNVD
added 2022/08/04 12:00 a.m.12 views

v4l2loopback 格式化字符串错误漏洞

v4l2loopback is a kernel module for creating V4L2 loopback devices by umläute individual developers. A formatting string error vulnerability exists in v4l2loopback, which stems from potentially leaking kernel stack memory based on the way the string is formatted in the card label, as well as...

7.3CVSS6.8AI score0.00334EPSS
SaveExploits1References4
NVD
NVD
added 2022/08/02 4:15 p.m.19 views

CVE-2022-35219

The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet key parameter. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service...

5.5CVSS0.00187EPSS
SaveExploits0References1
NVD
NVD
added 2022/08/02 4:15 p.m.19 views

CVE-2022-35217

The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A local area network attacker with general user privilege can exploit this vulnerability to execute arbitrary code, manipulate system command or...

7.8CVSS0.00234EPSS
SaveExploits0References1
NVD
NVD
added 2022/08/02 4:15 p.m.32 views

CVE-2022-35218

The NHI card’s web service component has a heap-based buffer overflow vulnerability due to insufficient validation for packet origin parameter length. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service...

5.5CVSS0.00187EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/02 4:15 p.m.22 views

Stack overflow

The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet key parameter. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service...

1.7CVSS5.8AI score0.00187EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/02 4:15 p.m.22 views

Heap overflow

The NHI card’s web service component has a heap-based buffer overflow vulnerability due to insufficient validation for packet origin parameter length. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service...

1.7CVSS5.8AI score0.00187EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/02 4:15 p.m.29 views

Stack overflow

The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A local area network attacker with general user privilege can exploit this vulnerability to execute arbitrary code, manipulate system command or...

4.3CVSS8AI score0.00234EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/08/02 3:20 p.m.35 views

CVE-2022-35219 NHI card’s web service component - Stack-based Buffer Overflow-2

The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet key parameter. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service...

5.5CVSS6AI score0.00187EPSS
SaveExploits0References1
Rows per page
Query Builder