Lucene search
+L

24533 matches found

Positive Technologies
Positive Technologies
added 2022/12/21 12:00 a.m.8 views

PT-2022-27847 · Sslh · Sslh

Name of the Vulnerable Software and Affected Versions: sslh affected versions not specified Description: A critical issue has been found in the function hexdump of the file probe.c of the component Packet Dumping Handler. The manipulation of the argument msg info leads to a format string issue. T...

9.8CVSS9.3AI score0.00855EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2022/12/21 12:00 a.m.7 views

CVE-2022-4639 sslh Packet Dumping probe.c hexdump format string

A vulnerability, which was classified as critical, has been found in sslh. This issue affects the function hexdump of the file probe.c of the component Packet Dumping Handler. The manipulation of the argument msginfo leads to format string. The attack may be initiated remotely. The name of the...

5.6CVSS9.6AI score0.00855EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/12/21 12:00 a.m.35 views

CVE-2022-4639 sslh Packet Dumping probe.c hexdump format string

A vulnerability, which was classified as critical, has been found in sslh. This issue affects the function hexdump of the file probe.c of the component Packet Dumping Handler. The manipulation of the argument msginfo leads to format string. The attack may be initiated remotely. The name of the...

5.6CVSS9.8AI score0.00855EPSS
SaveExploits0References3
OSV
OSV
added 2022/12/21 12:00 a.m.23 views

CVE-2022-4639 sslh Packet Dumping probe.c hexdump format string

A vulnerability, which was classified as critical, has been found in sslh. This issue affects the function hexdump of the file probe.c of the component Packet Dumping Handler. The manipulation of the argument msginfo leads to format string. The attack may be initiated remotely. The name of the...

5.6CVSS6.5AI score
SaveExploits0References5
Huntr
Huntr
added 2022/12/20 11:32 a.m.80 views

Cross-site scripting - Stored via upload `.svg` file in

Description When user upload a file with .svg extension and direct access this file, the server response with Content-type: image/svg+xml lead to processing SVG as HTML file Proof of Concept POST /api/resource HTTP/2 Host: demo.usememos.com Cookie:...

4.9CVSS5.6AI score0.00695EPSS
SaveExploits1References2
NVD
NVD
added 2022/12/19 2:15 p.m.28 views

CVE-2020-36619

A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function addch of the file demodflex.c. The manipulation of the argument ch leads to format string. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is...

9.8CVSS0.00889EPSS
SaveExploits0References4
OSV
OSV
added 2022/12/19 2:15 p.m.6 views

DEBIAN-CVE-2020-36619

A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function addch of the file demodflex.c. The manipulation of the argument ch leads to format string. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is...

9.8CVSS7.7AI score0.00889EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/19 2:15 p.m.18 views

CVE-2020-36619

A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function addch of the file demodflex.c. The manipulation of the argument ch leads to format string. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is...

9.8CVSS9.6AI score
SaveExploits0References4
OSV
OSV
added 2022/12/19 2:15 p.m.7 views

UBUNTU-CVE-2020-36619

A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function addch of the file demodflex.c. The manipulation of the argument ch leads to format string. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is...

9.8CVSS5.5AI score0.00889EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/12/19 2:15 p.m.25 views

CVE-2020-36619

A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function addch of the file demodflex.c. The manipulation of the argument ch leads to format string. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is...

9.8CVSS6.7AI score0.00889EPSS
SaveExploits0References3
Prion
Prion
added 2022/12/19 2:15 p.m.18 views

Format string

A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function addch of the file demodflex.c. The manipulation of the argument ch leads to format string. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is...

7.5CVSS9.5AI score0.00889EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2022/12/19 10:00 a.m.67 views

CVE-2022-41992

PowerISO 8.3 is affected by CVE-2022-41992 due to a memory corruption in the VHD File Format CXSPARSE record parsing. The vulnerability arises because the Num of blocks value from the CXSPARSE record is not validated, allowing an attacker to control the loop counter and trigger an out-of-bounds w...

7.8CVSS7.7AI score0.00469EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/19 10:00 a.m.5 views

CVE-2022-41992

A memory corruption vulnerability exists in the VHD File Format parsing CXSPARSE record functionality of PowerISO PowerISO 8.3. A specially-crafted file can lead to an out-of-bounds write. A victim needs to open a malicious file to trigger this vulnerability...

7.8CVSS7.8AI score0.00469EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/12/19 10:00 a.m.29 views

CVE-2022-41992

A memory corruption vulnerability exists in the VHD File Format parsing CXSPARSE record functionality of PowerISO PowerISO 8.3. A specially-crafted file can lead to an out-of-bounds write. A victim needs to open a malicious file to trigger this vulnerability...

7.8CVSS7.9AI score0.00469EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2022/12/19 12:00 a.m.3 views

CVE-2020-36619 multimon-ng demod_flex.c add_ch format string

A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function addch of the file demodflex.c. The manipulation of the argument ch leads to format string. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is...

5.5CVSS9.8AI score0.00889EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/12/19 12:00 a.m.7 views

PT-2022-9015 · Unknown +2 · Multimon-Ng +2

Name of the Vulnerable Software and Affected Versions: multimon-ng versions prior to 1.2.0 Description: A critical issue affects the function add ch of the file demod flex.c. The manipulation of the argument ch leads to a format string issue. Recommendations: For versions prior to 1.2.0, upgrade ...

9.8CVSS6.9AI score0.00889EPSS
SaveExploits0References24
CVE
CVE
added 2022/12/19 12:00 a.m.55 views

CVE-2020-36619

CVE-2020-36619 affects multimon-ng, specifically the function add_ch in demod_flex.c. The issue arises from manipulating the argument ch, which leads to a format string vulnerability. The exploitation impact is described as high across confidentiality, integrity, and availability, with a base sco...

9.8CVSS7.5AI score0.00889EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2022/12/19 12:00 a.m.35 views

CVE-2020-36619 multimon-ng demod_flex.c add_ch format string

A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function addch of the file demodflex.c. The manipulation of the argument ch leads to format string. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is...

5.5CVSS9.6AI score0.00889EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/12/19 12:00 a.m.11 views

multimon-ng 格式化字符串错误漏洞

multimon-ng is a library from the personal developer Elias Önal. It can decode various digital transmission modes commonly found on VHF/UHF radios. A format string error vulnerability exists in multimon-ng, which stems from a problem with the function addch in the file demodflex.c, where...

9.8CVSS8AI score0.00889EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2022/12/19 12:00 a.m.62 views

CVE-2020-36619

A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function addch of the file demodflex.c. The manipulation of the argument ch leads to format string. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is...

9.8CVSS9.6AI score0.00889EPSS
SaveExploits0
Rows per page
Query Builder