Lucene search
K

429 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 6:41 p.m.6 views

CVE-2017-16322

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS7.7AI score0.00472EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:41 p.m.8 views

CVE-2017-16331

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS7.7AI score0.00472EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:40 p.m.5 views

CVE-2017-16267

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS7.7AI score0.00472EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:40 p.m.10 views

CVE-2017-16285

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS7.7AI score0.00437EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/29 12:0 a.m.2 views

GitHub Enterprise Server 安全漏洞

GitHub Enterprise Server is an open source application from GitHub in the United States. It provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server that stem...

7.1CVSS7AI score0.00243EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/12/04 12:0 a.m.1 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from an incorrect boundary check in rpcmsghandler and related handlers in drivers/misc/mediatek/ecci/portrpc.c, where an out-of-bounds write may exist...

7.8CVSS9.2AI score0.00017EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/04 12:0 a.m.1 views

PT-2024-10663 · Google · Android +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write in the rpc msg handler and related handlers of drivers/misc/mediatek/eccci/port rpc.c due to an...

7.8CVSS6.7AI score0.00017EPSS
Exploits0References3
CVE
CVE
added 2024/11/13 4:9 p.m.38 views

CVE-2024-9413

CVE-2024-9413 affects ARM SCP-Firmware, specifically SCP-Firmware releases 2.11.0–2.15.0. The root cause is improper error handling in the transport_message_handler, which could enable an Application Processor (AP) to trigger a buffer overflow in SCP firmware. Documented impact indicates high con...

8CVSS7.6AI score0.00682EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.1 views

ARM SCP-Firmware 安全漏洞

ARM SCP-Firmware is a firmware driver from ARM UK. A security vulnerability exists in ARM SCP-Firmware versions 2.11.0-2.15.0, which stems from the failure of the transportmessagehandler function to properly handle errors, resulting in a buffer overflow...

8CVSS7.1AI score0.00682EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/10/10 12:0 a.m.2 views

PT-2024-7383 · Rockwell Automation · Factorytalk Logix Echo +5

Name of the Vulnerable Software and Affected Versions: Rockwell Automation ControlLogix versions affected versions not specified Rockwell Automation CompactLogix 5380 affected versions not specified Rockwell Automation Compact GuardLogix 5380 SIL 2 affected versions not specified Rockwell...

8.7CVSS6.9AI score0.00581EPSS
Exploits0References11
NVD
NVD
added 2024/08/17 9:15 p.m.11 views

CVE-2024-7901

A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/app.shtm/alarms/Scada of the component Message Handler. The manipulation leads to cross site scripting. The attack can be launched...

5.4CVSS0.00177EPSS
Exploits0References3
OSV
OSV
added 2024/08/17 9:15 p.m.9 views

CVE-2024-7901

A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/app.shtm/alarms/Scada of the component Message Handler. The manipulation leads to cross site scripting. The attack can be launched...

5.4CVSS6.5AI score
Exploits0References3
Cvelist
Cvelist
added 2024/08/17 9:0 p.m.11 views

CVE-2024-7901 Scada-LTS Message Scada cross site scripting

A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/app.shtm/alarms/Scada of the component Message Handler. The manipulation leads to cross site scripting. The attack can be launched...

5.3CVSS0.00177EPSS
Exploits0References3
CVE
CVE
added 2024/08/17 9:0 p.m.45 views

CVE-2024-7901

CVE-2024-7901 affects Scada-LTS 2.7.8, specifically the Message Handler component. The vulnerability stems from an unknown functionality in the file /Scada-LTS/app.shtm#/alarms/Scada, enabling remote cross-site scripting. The exploit has been publicly disclosed. Remediation: a fix is planned for ...

5.4CVSS3.8AI score0.00177EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/17 9:0 p.m.13 views

CVE-2024-7901 Scada-LTS Message Scada cross site scripting

A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/app.shtm/alarms/Scada of the component Message Handler. The manipulation leads to cross site scripting. The attack can be launched...

5.3CVSS3.8AI score0.00177EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/08/17 12:0 a.m.2 views

PT-2024-8682 · Scada-Lts · Scada-Lts

Name of the Vulnerable Software and Affected Versions: Scada-LTS version 2.7.8 Description: A vulnerability has been found in the Message Handler component of Scada-LTS, related to the file /Scada-LTS/app.shtm/alarms/Scada. The manipulation leads to cross-site scripting. The attack can be launche...

5.4CVSS4.1AI score0.00177EPSS
Exploits0References12
OSV
OSV
added 2024/06/19 2:15 p.m.2 views

UBUNTU-CVE-2024-38572

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bound access of qmiinvokehandler Currently, there is no terminator entry for ath12kqmimsghandlers hence facing below KASAN warning, ================================================================== BUG:...

7.1CVSS6.4AI score0.00036EPSS
Exploits0References12
Positive Technologies
Positive Technologies
added 2024/06/13 12:0 a.m.1 views

PT-2024-24959 · Google · Android +1

Name of the Vulnerable Software and Affected Versions: No specific software name or versions are mentioned in the provided descriptions. Description: The issue is related to uninitialized data in the AcvpOnMessage function of avcp.cpp, which could lead to a possible escalation of privilege EOP...

7.8CVSS7AI score0.00047EPSS
Exploits0References5
OSV
OSV
added 2024/05/16 10:15 a.m.1 views

CVE-2024-4975

A vulnerability, which was classified as problematic, has been found in code-projects Simple Chat System 1.0. This issue affects some unknown processing of the component Message Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

6.1CVSS3.8AI score0.00167EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/05/16 10:0 a.m.11 views

CVE-2024-4975 code-projects Simple Chat System Message cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Simple Chat System 1.0. This issue affects some unknown processing of the component Message Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

5.3CVSS6.2AI score0.00167EPSS
Exploits1References4
Rows per page
Query Builder