Lucene search
+L

92 matches found

osv_asb
osv_asb
•added 2024/09/01 12:00 a.m.•39 views

ASB-A-329641908

In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.5AI score0.00106EPSS
SaveExploits0References2
NVD
NVD
•added 2024/03/11 5:15 p.m.•52 views

CVE-2024-0050

In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. This could lead to a local non-security issue with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.5AI score0.00126EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/03/11 5:15 p.m.•25 views

CVE-2024-0050

In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. This could lead to a local non-security issue with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00126EPSS
SaveExploits0References2
Prion
Prion
•added 2024/03/11 5:15 p.m.•36 views

Out-of-bounds

In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. This could lead to a local non-security issue with no additional execution privileges needed. User interaction is not needed for exploitation...

7.3AI score0.00126EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/03/11 4:35 p.m.•70 views

CVE-2024-0050

In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. This could lead to a local non-security issue with no additional execution privileges needed. User interaction is not needed for exploitation...

6.7AI score0.00126EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/11 12:00 a.m.•22 views

PT-2024-15323 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software name or version is mentioned in the provided descriptions. Description: In the getConfig function of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. This could...

7.8CVSS6AI score0.00126EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/11 12:00 a.m.•6 views

CVE-2024-0050: Out-of-bounds Write

In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. This could lead to a local non-security issue with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.1AI score0.00126EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/03/11 12:00 a.m.•24 views

Google Android Security Vulnerability

Google Android is a Linux-based open-source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android, which stems from a missing validation check in the getConfig method of the SoftVideoDecoderOMXComponent.cpp file, which may result in an...

7.8CVSS6AI score0.00126EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2023/12/19 12:00 a.m.•42 views

Asterisk AMI Interface File Read

The vulnerability of the AMI interface of Asterisk management systems for IP-telephony and Certified Asterisk is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain read access to...

6.1CVSS7.3AI score0.45293EPSS
SaveExploits3References7Affected Software4
OpenVAS
OpenVAS
•added 2023/12/15 12:00 a.m.•67 views

Asterisk Multiple Vulnerabilities (Dec 2023)

Asterisk is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk"; if description...

8.2CVSS6.4AI score0.45293EPSS
SaveExploits5References5
CNVD
CNVD
•added 2023/02/07 12:00 a.m.•71 views

D-Link DIR-825 Buffer Overflow Vulnerability (CNVD-2023-21665)

D-Link DIR-825 is a router from D-Link, a Chinese company. D-Link DIR-825 v1.33.0.44ebdd4-embedded and previous versions are vulnerable to a buffer overflow vulnerability, which is caused by a boundary error when handling untrusted input, and can be exploited to execute arbitrary code against the...

9.8CVSS9.8AI score0.01159EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/01/31 4:15 p.m.•24 views

CVE-2022-47035

Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method to the /CPE endpoint...

9.8CVSS6.1AI score0.01159EPSS
SaveExploits0References2
NVD
NVD
•added 2023/01/31 4:15 p.m.•38 views

CVE-2022-47035

Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method to the /CPE endpoint...

9.8CVSS9.7AI score0.01159EPSS
SaveExploits0References2
Prion
Prion
•added 2023/01/31 4:15 p.m.•31 views

Buffer overflow

Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method to the /CPE endpoint...

7.5CVSS9.6AI score0.01159EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/31 12:00 a.m.•13 views

CVE-2022-47035

Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method to the /CPE endpoint...

9.7AI score0.01159EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/01/31 12:00 a.m.•50 views

CVE-2022-47035

Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method to the /CPE endpoint...

9.8AI score0.01159EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/31 12:00 a.m.•10 views

CVE-2022-47035: Buffer Copy without Checking Size of Input

Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method to the /CPE endpoint...

9.8CVSS6.5AI score0.01159EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/01/31 12:00 a.m.•23 views

D-Link DIR-825 security vulnerabilities

D-Link DIR-825 is a router from D-Link, a Chinese company. D-Link DIR-825 v1.33.0.44ebdd4-embedded and previous versions are vulnerable to a buffer overflow vulnerability, which is caused by a boundary error when handling untrusted input, and can be exploited to execute arbitrary code against the...

9.8CVSS8.2AI score0.01159EPSS
SaveExploits0References3
osv_alpine
osv_alpine
•added 2022/12/05 9:15 p.m.•15 views

ALPINE-CVE-2022-42706

An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected application to access files outside of the asterisk configuration directory, aka Directory Traversal...

4.9CVSS6.9AI score0.01176EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2022/12/05 9:15 p.m.•9 views

DEBIAN-CVE-2022-42706

An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected application to access files outside of the asterisk configuration directory, aka Directory Traversal...

4.9CVSS4.8AI score0.01176EPSS
SaveExploits0References1
Rows per page
Query Builder