Lucene search
+L

5698 matches found

Positive Technologies
Positive Technologies
added 2022/01/01 12:00 a.m.14 views

PT-2025-37624

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the rtc subsystem, specifically within the msc313 rtc probe function. A function prototype mismatch exists when calling clk disable unprepare, which...

5.5CVSS6AI score0.00154EPSS
SaveExploits0References20
OSV
OSV
added 2021/12/30 10:15 p.m.5 views

DEBIAN-CVE-2021-4185

Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.3AI score0.03774EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:00 a.m.11 views

The vulnerability in the implementation of the WebRTC technology in Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the WebRTC technology implementation in Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of information...

8.8CVSS7.4AI score0.02768EPSS
SaveExploits0References7Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:00 a.m.10 views

The vulnerability of the WebRTC extension of the Microsoft Edge browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the Fedora operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of information...

8.8CVSS7.4AI score0.02798EPSS
SaveExploits0References8Affected Software7
OSV
OSV
added 2021/12/27 6:15 p.m.9 views

ALPINE-CVE-2021-43845

PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA a...

9.1CVSS6.9AI score0.03722EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/23 1:15 a.m.3 views

DEBIAN-CVE-2021-4079

Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via crafted WebRTC packets...

8.8CVSS8.6AI score0.00846EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/22 6:15 p.m.7 views

UBUNTU-CVE-2021-43804

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE message contains a reason's length, this declared length is not checked against th...

7.3CVSS7.3AI score0.02192EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/12/22 12:00 a.m.10 views

PJSIP 缓冲区错误漏洞

PJSIP is a free and open source multimedia communications library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. PJSIP suffers from a buffer error vulnerability that arises from the fact that if an incoming "RTCP BYE" message contains a reason...

7.5CVSS7.7AI score0.02192EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
added 2021/12/22 12:00 a.m.14 views

PT-2021-6171 · Pjsip +3 · Pjsip +3

Name of the Vulnerable Software and Affected Versions: PJSIP versions prior to the fixed version Description: The issue is related to a buffer overflow in the PJSIP library when handling the length of RTCP BYE messages. This can be exploited by a remote attacker to execute arbitrary code. The...

9.8CVSS8.8AI score0.1665EPSS
SaveExploits2References110
OSV
OSV
added 2021/12/21 6:15 p.m.7 views

UBUNTU-CVE-2021-45292

The gfisomhintrtpread function in GPAC 1.0.1 allows attackers to cause a denial of service Invalid memory address dereference via a crafted file in the MP4Box command...

5.5CVSS7.3AI score0.00622EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2021/12/21 9:33 a.m.58 views

Moderate: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

4.7CVSS6.7AI score0.00216EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/21 9:15 a.m.15 views

CVE-2021-24750

The WP Visitor Statistics Real Time Traffic WordPress plugin before 4.8 does not properly sanitise and escape the refUrl in the refDetails AJAX action, available to any authenticated user, which could allow users with a role as low as subscriber to perform SQL injection attacks...

8.8CVSS5.8AI score0.38298EPSS
SaveExploits5References3
OSV
OSV
added 2021/12/21 9:12 a.m.37 views

RLSA-2021:5241 Moderate: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: In Overlayfs missing a check for a negative dentry before calling vfsrename CVE-2021-20321 For more details about the security...

5.5CVSS6.7AI score0.00216EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2021/12/21 9:12 a.m.45 views

kernel-rt security and bug fix update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

4.7CVSS0.3AI score0.00216EPSS
SaveExploits0
HPE Security Bulletins
HPE Security Bulletins
added 2021/12/20 12:00 a.m.10 views

HPESBGN04224 rev.1 - HPE Real Time Management System (RTMS), Apache Log4j 2 Remote Arbitrary Code Execution, Remote Code Execution, and Remote Denial of Service

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Real Time Management System RTMS - Prior to RTMS 3.00.72.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

10CVSS6.8AI score0.99999EPSS
SaveExploits372
CNVD
CNVD
added 2021/12/19 12:00 a.m.60 views

Delta Electronics DIAEnergie .NET Request.QueryString Cross-Site Scripting Vulnerability

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.A cross-site...

7.5CVSS2.1AI score0.00603EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/12/19 12:00 a.m.41 views

Delta Electronics DIAEnergie descr parameter cross-site scripting vulnerability

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.A cross-site...

6.5CVSS2AI score0.10562EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/12/19 12:00 a.m.53 views

Delta Electronics DIAEnergie HandlerEnergyType Parameter Name Cross-Site Scripting Vulnerability

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.A cross-site...

7.5CVSS1.5AI score0.09492EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/15 8:15 a.m.6 views

CVE-2021-45043

HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang sLanguage parameter...

7.5CVSS7.1AI score0.33133EPSS
SaveExploits2References4
NVD
NVD
added 2021/12/15 8:15 a.m.27 views

CVE-2021-45043

HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang sLanguage parameter...

7.5CVSS0.33133EPSS
SaveExploits2References2
Rows per page
Query Builder