CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2271 matches found

SUSE CVE•added 2023/02/15 3:24 a.m.•11 views

SUSE CVE-2022-35409

An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information...

9.1CVSS8.7AI score0.023EPSS

SaveExploits1References4

SUSE CVE•added 2023/02/15 3:24 a.m.•14 views

SUSE CVE-2022-37026

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS...

9.4CVSS6.9AI score0.01487EPSS

SaveExploits0References9

SUSE CVE•added 2023/02/15 3:22 a.m.•15 views

SUSE CVE-2022-44792

handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker who has write access to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service...

6.5CVSS7.6AI score0.52054EPSS

SaveExploits1References7

SUSE CVE•added 2023/02/15 3:22 a.m.•13 views

SUSE CVE-2022-46393

An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap-based buffer overflow and heap-based buffer over-read in DTLS if MBEDTLSSSLDTLSCONNECTIONID is enabled and MBEDTLSSSLCIDINLENMAX 2 MBEDTLSSSLCIDOUTLENMAX...

9.8CVSS9.6AI score0.01255EPSS

SaveExploits0References4

CNNVD•added 2023/02/12 12:00 a.m.•22 views

Qualcomm chip code vulnerabilities

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are often manufactured on the surface of semiconductor wafers. A security vulnerability exists in the Qualcomm Chip modem module that stems...

7.5CVSS7.3AI score0.00406EPSS

SaveExploits0References2

Positive Technologies•added 2023/02/01 12:00 a.m.•40 views

PT-2023-2968 · Faronics · Faronics Insight

Name of the Vulnerable Software and Affected Versions: Faronics Insight version 10.0.19045 Description: The issue is related to insufficient protection of service data in the Enhanced Security mode of the Teacher Console and Student Console of the Faronics Insight platform. Exploitation of this...

8.3CVSS8.2AI score0.00686EPSS

SaveExploits1References5

BDU FSTEC•added 2023/01/27 12:00 a.m.•24 views

Core server component Full Control

The vulnerability of the Core server component of Oracle Communications Converged Application Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application using the UDP network protocol...

10CVSS7.7AI score0.00839EPSS

SaveExploits0References3Affected Software1

osv_cve•added 2023/01/26 10:15 p.m.•20 views

CVE-2022-41009

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

9.8CVSS6.3AI score0.01666EPSS

SaveExploits1References2