Lucene search
+L

5456 matches found

Tenable Nessus
Tenable Nessus
•added 2023/11/15 12:00 a.m.•32 views

Rockwell Automation Stratix 5900 Improper Input Validation (CVE-2014-2106)

A vulnerability in the Session Initiation Protocol SIP implementation in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device. To exploit this vulnerability, affected devices must be configured to process SIP messages...

7.8CVSS7.2AI score0.02446EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2023/11/15 12:00 a.m.•25 views

Rockwell Automation Stratix 5900 (CVE-2014-3360)

A vulnerability in the Session Initiation Protocol SIP implementation in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device. To exploit this vulnerability, affected devices must be configured to process SIP messages...

7.8CVSS7.7AI score0.03313EPSS
SaveExploits0References4
Oracle linux
Oracle linux
•added 2023/11/12 12:00 a.m.•58 views

qt5 security and bug fix update

adwaita-qt 1.4.2-1 - 1.4.2 Resolves: bz2175754 python-pyqt5-sip 12.11.1-1 - 12.11.1 Resolves: bz2188589 python-qt5 5.15.9-1 - 5.15.9 Resolves: bz2175758 qgnomeplatform 0.9.0-1 - 0.9.0 Resolves: bz2175753 qt5 5.15.9-1 - 5.15.9 Resolves: bz2175724 qt5-doc 5.15.9-1 - 5.15.9 Resolves: bz2175726...

7.5CVSS6.9AI score0.0158EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2023/10/26 12:00 a.m.•21 views

Sofia-SIP Heap Buffer Overflow DoS

The vulnerability of the Sofia-SIP user agent library session initiation protocol relates to the possibility of writing beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted STUN packets remotely...

10CVSS8.3AI score0.0238EPSS
SaveExploits1References7Affected Software4
OpenVAS
OpenVAS
•added 2023/10/25 12:00 a.m.•22 views

Ubuntu: Security Advisory (USN-6448-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.01056EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2023/10/24 6:43 a.m.•57 views

USN-6448-1: Sofia-SIP vulnerability

Xu Biang discovered that Sofia-SIP did not properly manage memory when handling STUN packets. An attacker could use this issue to cause Sofia-SIP to crash, resulting in a denial of service, or possibly execute arbitrary code...

7.5CVSS7.3AI score0.01056EPSS
SaveExploits0
osv_usn
osv_usn
•added 2023/10/24 6:43 a.m.•22 views

USN-6448-1 sofia-sip vulnerability

Xu Biang discovered that Sofia-SIP did not properly manage memory when handling STUN packets. An attacker could use this issue to cause Sofia-SIP to crash, resulting in a denial of service, or possibly execute arbitrary code...

7.5CVSS7.1AI score0.01056EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/10/24 12:00 a.m.•32 views

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Sofia-SIP vulnerability (USN-6448-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6448-1 advisory. Xu Biang discovered that Sofia-SIP did not properly manage memory when handling STUN packets. An attacker coul...

7.5CVSS7.6AI score0.01056EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/17 12:00 a.m.•26 views

YeaLink SIP-T19P-E2 OS Command Injection Vulnerability

YeaLink SIP-T19P-E2 is a VOIP phone from China YeaLink. A security vulnerability exists in YeaLink SIP-T19P-E2 version v.53.84.0.15, which originates from a vulnerability that allows a privileged attacker to execute arbitrary code via a specially crafted request via the ping feature of the...

8.8CVSS7.6AI score0.01971EPSS
SaveExploits1References3
NVD
NVD
•added 2023/10/13 12:15 a.m.•30 views

CVE-2023-44198

An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networks. If the SIP ALG is configured and a device receives a...

7.5CVSS6.6AI score0.00417EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/10/13 12:15 a.m.•28 views

CVE-2023-44198

An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networks. If the SIP ALG is configured and a device receives a...

7.5CVSS5.8AI score0.00417EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/13 12:15 a.m.•36 views

Input validation

An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networks. If the SIP ALG is configured and a device receives a...

5CVSS7.6AI score0.00417EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/12 11:05 p.m.•20 views

CVE-2023-44198 Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets

An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networks. If the SIP ALG is configured and a device receives a...

5.8CVSS7.1AI score0.00417EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/10/12 11:05 p.m.•36 views

CVE-2023-44198 Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets

An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networks. If the SIP ALG is configured and a device receives a...

5.8CVSS7.8AI score0.00417EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/12 11:05 p.m.•90 views

CVE-2023-44198

CVE-2023-44198 affects Juniper Networks Junos OS SIP ALG on SRX Series and MX Series. The vulnerability stems from an improper check for unusual or exceptional conditions, enabling an unauthenticated, network-based attacker to cause an integrity impact in connected networks. When SIP ALG is enabl...

7.5CVSS6.6AI score0.00417EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/12 12:00 a.m.•11 views

CVE-2023-44198: Improper Check for Unusual or Exceptional Conditions

An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networks. If the SIP ALG is configured and a device receives a...

7.5CVSS6.6AI score0.00417EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/10/11 12:00 a.m.•51 views

Juniper Junos OS Vulnerability (JSA73164)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73164 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated...

7.5CVSS7.4AI score0.00417EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/10/06 12:00 a.m.•22 views

PJSIP Resource Management Error Vulnerability

PJSIP is a free and open source multimedia communications library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. A resource management error vulnerability exists in versions of PJSIP prior to 2.14, which stems from a higher-level transfer being...

9.8CVSS6.7AI score0.0159EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2023/09/27 12:00 a.m.•12 views

PT-2023-8586 · Unknown +1 · Freeswitch +1

Name of the Vulnerable Software and Affected Versions: FreeSWITCH versions prior to 1.10.11 Description: The issue is related to incorrect handling of exceptional states in the FreeSWITCH software-defined telecom stack, which can lead to a Denial of Service DoS when handling DTLS-SRTP for media...

7.8CVSS6.3AI score0.01485EPSS
SaveExploits4References21
BDU FSTEC
BDU FSTEC
•added 2023/09/25 12:00 a.m.•21 views

D-Link DIR-816 A2 Router Buffer Overflow

The vulnerability of the ipportFilter function in D-Link DIR-816 A2 router software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8AI score0.13317EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder