Lucene search
+L

998 matches found

RedhatCVE
RedhatCVE
•added 2025/06/04 7:18 p.m.•20 views

CVE-2025-1051

Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS8.5AI score0.00375EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/02 7:05 p.m.•107 views

CVE-2025-1051

CVE-2025-1051 – Sonos Era 300 RCE via heap-based overflow : The vulnerability affects Sonos Era 300 speakers and stems from improper validation of the length of ALAC data before copying into a heap-based buffer. This allows network-adjacent attackers to execute code with the context of the anacap...

8.8CVSS8.4AI score0.00375EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/06/02 7:05 p.m.•39 views

CVE-2025-1051 Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability

Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS0.00375EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/06/02 12:00 a.m.•16 views

Sonos Era 300 security vulnerability

Sonos Era 300 is a spatial audio speaker with Dolby Atmos Dolby Atmos from Sonos USA. A security vulnerability exists in Sonos Era 300 that stems from a lack of length validation during ALAC data processing, which could lead to remote code execution...

8.8CVSS8.4AI score0.00375EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2025/05/31 12:00 a.m.•36 views

Blockchain Powered Edge Intelligence for U-Healthcare in Privacy Critical and Time Sensitive Environment

Edge Intelligence EI serves as a critical enabler for privacy-preserving systems by providing AI-empowered computation and distributed caching services at the edge, thereby minimizing latency and enhancing data privacy. The integration of blockchain technology further augments EI frameworks by...

6.7AI score
SaveExploits0
Cvelist
Cvelist
•added 2025/05/30 5:27 a.m.•59 views

CVE-2025-48490 Laravel Rest Api has a Search Validation Bypass

Laravel Rest Api is an API generator. Prior to version 2.13.0, a validation bypass vulnerability was discovered where multiple validations defined for the same attribute could be silently overridden. Due to how the framework merged validation rules across multiple contexts such as index, store, a...

8.7CVSS0.00637EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/05/29 12:00 a.m.•22 views

TOTOLINK CA600-PoE Router Arbitrary Command Execution

The vulnerability of the setUpgradeFW function in TOTOLINK CA600-PoE router microprogramming software is related to the lack of measures taken to clean data at the management level when processing the FileName parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

6.5CVSS7.4AI score0.00872EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/05/29 12:00 a.m.•28 views

PT-2025-23217 · Sonos · Sonos Era 300

Name of the Vulnerable Software and Affected Versions: Sonos Era 300 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. No authentication is required to exploit this issue. The specific flaw exist...

8.8CVSS8.3AI score0.00375EPSS
SaveExploits0References8
Zero Day Initiative
Zero Day Initiative
•added 2025/05/29 12:00 a.m.•21 views

(Pwn2Own) Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of ALAC data. The issue results from the lack of proper validation of the...

8.8CVSS8.5AI score0.00375EPSS
SaveExploits0
CNVD
CNVD
•added 2025/05/28 12:00 a.m.•27 views

Siemens SCALANCE LPE9403 Path Traversal Vulnerability (CNVD-2025-17601)

Siemens SCALANCE LPE9403 is a local processing engine for industrial field data processing from Siemens. It is used to capture, collect and pre-process industrial field data. A path traversal vulnerability exists in the Siemens SCALANCE LPE9403, which can be exploited by an attacker to cause a...

6.7CVSS5.5AI score0.0018EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2025/05/27 7:47 p.m.•23 views

GHSA-69RH-HCCR-CXRJ Laravel Rest Api has a Search Validation Bypass

A validation bypass vulnerability was discovered prior to version 2.13.0, where multiple validations defined for the same attribute could be silently overridden. Due to how the framework merged validation rules across multiple contexts such as index, store, and update actions, malicious actors...

8.7CVSS5.9AI score0.00637EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2025/05/27 7:47 p.m.•61 views

Laravel Rest Api has a Search Validation Bypass

A validation bypass vulnerability was discovered prior to version 2.13.0, where multiple validations defined for the same attribute could be silently overridden. Due to how the framework merged validation rules across multiple contexts such as index, store, and update actions, malicious actors...

8.7CVSS5.9AI score0.00637EPSS
SaveExploits0References5Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:54 a.m.•19 views

CVE-2023-1696

The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability...

7.5CVSS7.2AI score0.00447EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:28 a.m.•21 views

CVE-2022-48254

There is a data processing error vulnerability in Leia-B29 2.0.0.49M03. Successful exploitation could bypass lock screen authentication...

4.6CVSS5.5AI score0.00212EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:37 p.m.•27 views

CVE-2021-25141

A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch's management interface has been identified. The data processing error could be...

4.9CVSS5.2AI score0.00296EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:47 p.m.•22 views

CVE-2021-22456

A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable...

5.5CVSS5.8AI score0.00158EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:02 p.m.•22 views

CVE-2021-37098

Hilinksvc service exists a Data Processing Errors vulnerability .Successful exploitation of this vulnerability may cause application crash...

7.5CVSS7.3AI score0.00677EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:00 p.m.•27 views

CVE-2021-37012

There is a Data Processing Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash...

7.8CVSS7.3AI score0.00689EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:00 p.m.•18 views

CVE-2021-37018

There is a Data Processing Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash...

7.8CVSS7.3AI score0.00689EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 6:44 p.m.•38 views

CVE-2021-39975

Hilinksvc has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause denial of service attacks...

7.5CVSS7.2AI score0.00677EPSS
SaveExploits0References1
Rows per page
Query Builder