Lucene search
+L

239 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/07 12:00 a.m.•2 views

CVE-2026-39836: Undefined Security Weakness

The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL 0...

7.5CVSS7.6AI score0.0062EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/29 12:00 a.m.•20 views

PT-2026-38568

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The Dial and LookupPort functions panic on Windows when they receive an input containing a NUL 0 character. A panic is a runtime error that causes the program to...

9.8CVSS7.3AI score0.0062EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/03/29 10:58 a.m.•17 views

Malicious code in dial-app-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efdd5b481d49a0d9ac535aedde75dbf5638bd85e7efe9c536d2938c57142799 The package dial-app-version was found to contain malicious code. Source: ossf-package-analysis...

5.9AI score
SaveExploits0
osv-mal
osv-mal
•added 2026/03/29 10:58 a.m.•16 views

MAL-2026-2285 Malicious code in dial-app-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efdd5b481d49a0d9ac535aedde75dbf5638bd85e7efe9c536d2938c57142799 The package dial-app-version was found to contain malicious code. Source: ossf-package-analysis...

5.9AI score
SaveExploits0
CNVD
CNVD
•added 2026/03/02 12:00 a.m.•20 views

Smoothwall Express Cross-Site Scripting Vulnerability

Smoothwall Express is Smoothwall open source a GNU/Linux-based firewall operating system . Smoothwall Express cross-site scripting vulnerability , the vulnerability stems from the modem.cgi script for INIT, HANGUP, SPEAKERON, SPEAKEROFF, TONEDIAL and PULSEDIAL parameters of the user-supplied data...

7.2CVSS5.9AI score0.00266EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/02/16 12:00 a.m.•21 views

Smoothwall Express 跨站脚本漏洞

Smoothwall Express is Smoothwall open source a GNU/Linux-based firewall operating system . Smoothwall Express cross-site scripting vulnerability , the vulnerability stems from the modem.cgi script for INIT, HANGUP, SPEAKERON, SPEAKEROFF, TONEDIAL and PULSEDIAL parameters of the user-supplied data...

7.2CVSS5.9AI score0.00266EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/02/11 12:00 a.m.•21 views

Nsasoft SpotDialup 安全漏洞

Nsasoft SpotDialup is a tool developed by the NSASoft company in the United States, designed to restore dial-up connections. Version 1.6.7 of Nsasoft SpotDialup contains a security vulnerability; this vulnerability stems from a buffer overflow in the Name input field, which could lead to a...

7.5CVSS6AI score0.00444EPSS
SaveExploits0References3
OSV
OSV
•added 2026/01/15 4:16 p.m.•18 views

CVE-2021-47764

AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating DialUp connection and license name fields. Attackers can generate a 1000-character payload and paste it into specific input fields to trigger application crashes an...

5.5CVSS5.8AI score0.00194EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/01/15 3:52 p.m.•21 views

EUVD-2026-2771

AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating DialUp connection and license name fields. Attackers can generate a 1000-character payload and paste it into specific input fields to trigger application crashes an...

6.7CVSS5.9AI score0.00194EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/01/15 3:52 p.m.•11 views

CVE-2021-47764

AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating DialUp connection and license name fields. Attackers can generate a 1000-character payload and paste it into specific input fields to trigger application crashes an...

6.7CVSS5.8AI score0.00194EPSS
SaveExploits1References2Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:23 a.m.•16 views

CVE-2021-31584

Sipwise C5 NGCP wwwcsc version 3.6.4 up to and including platform NGCP CE mr3.8.13 allows call/click2dial CSRF attacks for actions with administrative privileges...

8.8CVSS7.6AI score0.00926EPSS
SaveExploits3References1
BDU FSTEC
BDU FSTEC
•added 2026/01/09 12:00 a.m.•15 views

The vulnerability of the RADIUS protocol implementation (Remote Authentication in Dial-In User Service) of the Cisco Identity Services Engine (ISE) allows a perpetrator to cause service interruptions.

The vulnerability of the RADIUS protocol implementation Remote Authentication in Dial-In User Service of the Cisco Identity Services Engine ISE platform is related to insufficient comparison. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

8.6CVSS7.4AI score0.00712EPSS
SaveExploits0References4Affected Software1
RedhatCVE
RedhatCVE
•added 2025/12/30 9:09 p.m.•22 views

CVE-2025-69205

Micro Registration Utility µURU is a telephone self registration utility based on asterisk. In versions up to and including commit 88db9a953f38a3026bcd6816d51c7f3b93c55893, an attacker can crafts a special federation name and characters treated special by asterisk can be injected into the Dial...

6.3CVSS5.6AI score0.00144EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/29 9:15 p.m.•13 views

CVE-2025-69205

Micro Registration Utility µURU is a telephone self registration utility based on asterisk. In versions up to and including commit 88db9a953f38a3026bcd6816d51c7f3b93c55893, an attacker can crafts a special federation name and characters treated special by asterisk can be injected into the Dial...

6.3CVSS0.00144EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/29 8:52 p.m.•11 views

CVE-2025-69205 In µURU, a Specially Crafted Federation Name Allows Dialplan Injection

Micro Registration Utility µURU is a telephone self registration utility based on asterisk. In versions up to and including commit 88db9a953f38a3026bcd6816d51c7f3b93c55893, an attacker can crafts a special federation name and characters treated special by asterisk can be injected into the Dial...

6.3CVSS5.6AI score0.00144EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/29 8:52 p.m.•18 views

EUVD-2025-205640

Micro Registration Utility µURU is a telephone self registration utility based on asterisk. In versions up to and including commit 88db9a953f38a3026bcd6816d51c7f3b93c55893, an attacker can crafts a special federation name and characters treated special by asterisk can be injected into the Dial...

6.3CVSS5.6AI score0.00144EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/29 8:52 p.m.•47 views

CVE-2025-69205 In µURU, a Specially Crafted Federation Name Allows Dialplan Injection

Micro Registration Utility µURU is a telephone self registration utility based on asterisk. In versions up to and including commit 88db9a953f38a3026bcd6816d51c7f3b93c55893, an attacker can crafts a special federation name and characters treated special by asterisk can be injected into the Dial...

6.3CVSS0.00144EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/29 12:00 a.m.•4 views

CVE-2025-69205: Improper Input Validation

Micro Registration Utility µURU is a telephone self registration utility based on asterisk. In versions up to and including commit 88db9a953f38a3026bcd6816d51c7f3b93c55893, an attacker can crafts a special federation name and characters treated special by asterisk can be injected into the Dial...

6.3CVSS5.6AI score0.00144EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/12/17 12:55 a.m.•79 views

CVE-2025-67722

FreePBX is an open-source web-based graphical user interface GUI that manages Asterisk. Prior to versions 16.0.45 and 17.0.24 of the FreePBX framework, an authenticated local privilege escalation exists in the deprecated FreePBX startup script amportal. In the deprecated amportal utility, the...

8.4CVSS5.8AI score0.00128EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•19 views

PT-2025-51351

Name of the Vulnerable Software and Affected Versions FreePBX versions prior to 16.0.45 FreePBX versions prior to 17.0.24 Description FreePBX is a web-based graphical user interface for managing Asterisk. A local privilege escalation exists in the deprecated FreePBX startup script amportal in...

8.4CVSS5.7AI score0.00128EPSS
SaveExploits0References9
Rows per page
Query Builder