Lucene search
+L

6223 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•13 views

CVE-2024-29946: Improper Input Validation

In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub lacks protections for risky SPL commands. This could let attackers bypass SPL safeguards for risky commands in the Hub. The vulnerability would require the attacker to phish the victim by tricking them into...

8.1CVSS5.9AI score0.00773EPSS
SaveExploits0References3
osv_azl
osv_azl
•added 2024/03/26 3:15 a.m.•23 views

AZL-70310 CVE-2024-29195 affecting package python-uamqp 1.5.1-3

The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used by the Azure IoT C SDK for communication between IoT Hub and IoT Hub devices. An attacker can cause an integer wraparound or under-allocation or heap buffer overflow due to...

8.1CVSS7AI score0.05008EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/03/26 3:15 a.m.•17 views

AZL-37086 CVE-2024-29195 affecting package azure-iot-sdk-c for versions less than 2024.03.04-1

The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used by the Azure IoT C SDK for communication between IoT Hub and IoT Hub devices. An attacker can cause an integer wraparound or under-allocation or heap buffer overflow due to...

8.1CVSS7AI score0.05008EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2024/03/26 3:15 a.m.•9 views

DEBIAN-CVE-2024-29195

The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used by the Azure IoT C SDK for communication between IoT Hub and IoT Hub devices. An attacker can cause an integer wraparound or under-allocation or heap buffer overflow due to...

8.1CVSS7AI score0.05008EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/03/26 3:15 a.m.•13 views

UBUNTU-CVE-2024-29195

The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used by the Azure IoT C SDK for communication between IoT Hub and IoT Hub devices. An attacker can cause an integer wraparound or under-allocation or heap buffer overflow due to...

8.1CVSS7AI score0.05008EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/03/26 2:57 a.m.•64 views

CVE-2024-29195 Azure C SDK Integer Wraparound Vulnerability

The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used by the Azure IoT C SDK for communication between IoT Hub and IoT Hub devices. An attacker can cause an integer wraparound or under-allocation or heap buffer overflow due to...

6CVSS7AI score0.05008EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/03/26 2:57 a.m.•30 views

CVE-2024-29195 Azure C SDK Integer Wraparound Vulnerability

The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used by the Azure IoT C SDK for communication between IoT Hub and IoT Hub devices. An attacker can cause an integer wraparound or under-allocation or heap buffer overflow due to...

6CVSS7AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/03/26 2:57 a.m.•16 views

CVE-2024-29195 Azure C SDK Integer Wraparound Vulnerability

The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used by the Azure IoT C SDK for communication between IoT Hub and IoT Hub devices. An attacker can cause an integer wraparound or under-allocation or heap buffer overflow due to...

6CVSS7AI score0.05008EPSS
SaveExploits0References2
CVE
CVE
•added 2024/03/26 2:57 a.m.•130 views

CVE-2024-29195

The CVE-2024-29195 advisory concerns the azure-c-shared-utility C library used by the Azure IoT C SDK for AMQP/MQTT communication. The described issue is an integer wraparound/under-allocation/heap buffer overflow stemming from vulnerable parameter checking in the buffer length handling, which co...

8.1CVSS7AI score0.05008EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2024/03/26 2:57 a.m.•79 views

CVE-2024-29195

The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used by the Azure IoT C SDK for communication between IoT Hub and IoT Hub devices. An attacker can cause an integer wraparound or under-allocation or heap buffer overflow due to...

8.1CVSS7AI score0.05008EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2024/03/26 12:00 a.m.•43 views

CVE-2024-29195

The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used by the Azure IoT C SDK for communication between IoT Hub and IoT Hub devices. An attacker can cause an integer wraparound or under-allocation or heap buffer overflow due to...

8.1CVSS6.8AI score0.05008EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/03/25 12:00 a.m.•9 views

PT-2024-2446

Name of the Vulnerable Software and Affected Versions azure-c-shared-utility affected versions not specified Description The azure-c-shared-utility library has a vulnerability related to the parameter checking mechanism, which can cause an integer wraparound, under-allocation, or heap buffer...

8.1CVSS6.9AI score0.05008EPSS
SaveExploits0References21
vulnersOsv
vulnersOsv
•added 2024/03/20 6:02 p.m.•2 views

jupyterhubutils (>=0.11.0, <=0.25.0), jupyterlabutils (>=0.9.1, <=0.10.0) +2 more potentially affected by CVE-2024-29033 via oauthenticator (0.13.0)

oauthenticator PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on oauthenticator and may be impacted: - jupyterhubutils =0.11.0, =0.9.1, =0.30.1, =0.0.2, =0.4.2 Source cves: CVE-2024-29033 Source advisory: OSV:GHSA-55M3-44XF-HG4H...

9.1CVSS7.2AI score0.00589EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2024/03/19 3:50 a.m.•9 views

SUSE CVE-2021-47133

In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Fix memory leak in amdsfhwork Kmemleak tool detected a memory leak in the amdsfh driver. ==================== unreferenced object 0xffff88810228ada0 size 32: comm "insmod", pid 3968, jiffies 4295056001 age 775.792s h...

5.5CVSS6.5AI score0.00193EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2024/03/18 6:49 p.m.•25 views

Important: Red Hat Enhancement Advisory: Red Hat Developer Hub 1.1 release

Red Hat Developer Hub 1.1 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single pa...

9.8CVSS6.8AI score0.99999EPSS
SaveExploits24References1
Positive Technologies
Positive Technologies
•added 2024/03/16 12:00 a.m.•22 views

PT-2024-21588 · Nouveau +4 · Nouveau +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.8.0-rc3+ Description: The vulnerability is related to a divide-by-zero regression on DP MST unplug with nouveau. It occurs when using nouveau and unplugging a StarTech MSTDP122DP DisplayPort 1.2 MST hub. The...

9.1CVSS6.1AI score0.01648EPSS
SaveExploits0References665
BDU FSTEC
BDU FSTEC
•added 2024/03/15 12:00 a.m.•21 views

USB Hub driver Windows Code Execution

The vulnerability of the USB Hub driver for Windows operating systems and Windows Server is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.2CVSS7.3AI score0.00904EPSS
SaveExploits0References2
CNVD
CNVD
•added 2024/03/14 12:00 a.m.•30 views

Microsoft Windows USB Hub Driver Remote Code Execution Vulnerability

Microsoft Windows USB Hub Driver is a driver from Microsoft USA. The Microsoft Windows USB Hub Driver suffers from a remote code execution vulnerability caused by a flaw in the USB Hub Driver component that can be exploited by an attacker to execute arbitrary code on a system...

6.8CVSS7.8AI score0.00904EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/12 5:15 p.m.•36 views

CVE-2024-21429

Windows USB Hub Driver Remote Code Execution Vulnerability...

6.8CVSS7.7AI score0.00904EPSS
SaveExploits0References1
Prion
Prion
•added 2024/03/12 5:15 p.m.•42 views

Remote code execution

Windows USB Hub Driver Remote Code Execution Vulnerability...

4.6CVSS7.6AI score0.00904EPSS
SaveExploits0References1
Rows per page
Query Builder