Lucene search
+L

4444 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/14 12:00 a.m.•3 views

CVE-2023-36850: Improper Validation of Specified Index, Position, or Offset in Input

An Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Connectivity Fault ManagementCFM module of Juniper Networks Junos OS on MX Seriesexcept MPC10, MPC11 and LC9600 allows an adjacent attacker on the local broadcast domain to cause a Denial of ServiceDoS...

6.5CVSS6.5AI score0.00303EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/07/12 12:00 a.m.•12 views

PT-2023-6646 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.1R3-S10 on MX Series Juniper Networks Junos OS 19.2 versions prior to 19.2R3-S7 on MX Series Juniper Networks Junos OS 19.3 versions prior to 19.3R3-S8 on MX Series Juniper Networks Junos OS 19.4...

6.5CVSS6.3AI score0.00303EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2023/07/12 12:00 a.m.•36 views

Juniper Junos OS Vulnerability (JSA71661)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA71661 advisory. - An Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Connectivity Fault ManagementCFM module of Juniper Networks Junos OS on MX...

6.5CVSS6.9AI score0.00303EPSS
SaveExploits0References3
OSV
OSV
•added 2023/07/11 3:15 a.m.•14 views

CVE-2023-33992

The SAP BW BICS communication layer in SAP Business Warehouse and SAP BW/4HANA - version SAPBW 730, SAPBW 731, SAPBW 740, SAPBW 730, SAPBW 750, DW4CORE 100, DW4CORE 200, DW4CORE 300, may expose unauthorized cell values to the data response. To be able to exploit this, the user still needs...

6.5CVSS5.8AI score0.00444EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/07/11 12:00 a.m.•16 views

The vulnerability of the Microsoft ODBC Driver for SQL Server’s dynamic layout library, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft ODBC Driver for SQL Server’s dynamic layout library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00603EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/07/11 12:00 a.m.•14 views

The vulnerability of ODBC and OLE DB drivers in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of ODBC and OLE DB drivers in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00603EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/07/11 12:00 a.m.•16 views

The vulnerability of the Microsoft ODBC Driver for SQL Server’s dynamic layout library, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft ODBC Driver for SQL Server’s dynamic layout library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00722EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
•added 2023/07/10 9:56 a.m.•475 views

Moderate: Red Hat Security Advisory: Red Hat Service Interconnect 1.4 Release security update

This is release 1.4 of the rpms for Red Hat Service Interconnect. Red Hat Service Interconnect 1.4 introduces a service network, linking TCP and HTTP services across the hybrid cloud. A service network enables communication between services running in different network locations or sites. It allo...

9.8CVSS6.8AI score0.04561EPSS
SaveExploits1References15
NVD
NVD
•added 2023/07/04 5:15 a.m.•44 views

CVE-2023-21635

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony...

7.8CVSS7.2AI score0.00115EPSS
SaveExploits0References1
Prion
Prion
•added 2023/07/04 5:15 a.m.•39 views

Memory corruption

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony...

4.3CVSS7.6AI score0.00115EPSS
SaveExploits0References1
CVE
CVE
•added 2023/07/04 4:46 a.m.•90 views

CVE-2023-21635

CVE-2023-21635 shows a memory corruption issue in the Data Network Stack & Connectivity when a SIM is detected during telephony. Multiple sources describe this as a buffer copy without size checking in Qualcomm closed-source components, leading to potential impact on confidentiality, integrity, a...

7.8CVSS6.8AI score0.00115EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/04 12:00 a.m.•5 views

CVE-2023-21635: Buffer Copy without Checking Size of Input

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony...

7.8CVSS7.3AI score0.00115EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/07/04 12:00 a.m.•20 views

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a series of chipsets from Qualcomm, an American company. The Qualcomm Chipsets have a security vulnerability that stems from a memory corruption issue in Network Stack and Connectivity when a SIM card is detected in a phone call...

7.8CVSS7.5AI score0.00115EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/07/04 12:00 a.m.•19 views

PT-2023-18298 · Qualcomm · Snapdragon +50

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a memory corruption problem in the Data Network Stack & Connectivity component when a SIM card is detected on the telephony system...

7.8CVSS7.9AI score0.00115EPSS
SaveExploits0References3
OSV
OSV
•added 2023/06/29 4:15 p.m.•19 views

CVE-2023-35830

STW aka Sensor-Technik Wiedemann TCG-4 Connectivity Module DeploymentPackagev3.03r0-Impala and DeploymentPackagev3.04r2-Jellyfish and TCG-4lite Connectivity Module DeploymentPackagev3.04r2-Jellyfish allow an attacker to gain full remote access with root privileges without the need for...

9.8CVSS7.9AI score0.01319EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/06/29 3:15 a.m.•9 views

CVE-2022-46408

Ericsson Network Manager ENM, versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager NCM where improper Neutralization of Formula Elements in a CSV File can lead to remote code execution or data leakage via maliciously injected hyperlinks. The attacker...

6.8CVSS7.3AI score0.00924EPSS
SaveExploits0References2
OSV
OSV
•added 2023/06/29 3:15 a.m.•18 views

CVE-2022-46408

Ericsson Network Manager ENM, versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager NCM where improper Neutralization of Formula Elements in a CSV File can lead to remote code execution or data leakage via maliciously injected hyperlinks. The attacker...

6.8CVSS6.3AI score0.00924EPSS
SaveExploits0References1
Prion
Prion
•added 2023/06/29 3:15 a.m.•32 views

Design/Logic Flaw

Ericsson Network Manager ENM, versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager NCM where improper Neutralization of Formula Elements in a CSV File can lead to remote code execution or data leakage via maliciously injected hyperlinks. The attacker...

5.4CVSS7.1AI score0.00924EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/06/29 12:00 a.m.•72 views

CVE-2023-35830

STW TCG-4 Connectivity Module (DeploymentPackage_v3.03r0-Impala, DeploymentPackage_v3.04r2-Jellyfish) and TCG-4lite Connectivity Module (DeploymentPackage_v3.04r2-Jellyfish) contain a vulnerability that allows an attacker to gain full remote access with root privileges without authentication, ena...

9.8CVSS9.8AI score0.01319EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/29 12:00 a.m.•6 views

CVE-2023-35830: Missing Authentication for Critical Function

STW aka Sensor-Technik Wiedemann TCG-4 Connectivity Module DeploymentPackagev3.03r0-Impala and DeploymentPackagev3.04r2-Jellyfish and TCG-4lite Connectivity Module DeploymentPackagev3.04r2-Jellyfish allow an attacker to gain full remote access with root privileges without the need for...

9.8CVSS8.8AI score0.01319EPSS
SaveExploits0References2
Rows per page
Query Builder