Lucene search
+L

78 matches found

CNNVD
CNNVD
added 2021/12/01 12:00 a.m.8 views

Wokka Lokka Q50 信息泄露漏洞

The Wokka Lokka Q50 is a children's smartwatch from Wokka Lokka USA. The Wokka Lokka Q50 suffers from an information disclosure vulnerability that originates from allowing a remote attacker knowing the SIM phone number and passcode to listen to the device's surroundings via callbacks in SMS...

9.3CVSS7.8AI score0.01041EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2021/07/07 12:00 a.m.18 views

Huawei EulerOS: Security Advisory for python-rtslib (EulerOS-SA-2021-2164)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS7.8AI score0.0239EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/02/16 8:15 p.m.6 views

CVE-2021-20071

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the sms.php dialogs...

4.8CVSS5.4AI score0.00468EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/08/24 12:00 a.m.10 views

ALEOS Buffer Overflow Vulnerability

ALEOS is an integrated development environment for building customized embedded M2M applications. A buffer overflow vulnerability exists in the SMS Handler API in ALEOS versions prior to 4.13.0, 4.9.5, and 4.4.9, which can be exploited by an attacker to execute code as root...

9CVSS7.8AI score0.01984EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/05/25 12:00 a.m.4 views

Vocational College Smart Campus Platform Has Logic Flaw Vulnerabilities

Vocational College Smart Campus Platform is a fully integrated large-scale application system for the management and teaching business characteristics of vocational colleges and universities, providing an integrated solution covering enrollment and employment, teaching and learning, student...

7AI score
SaveExploits0
OSV
OSV
added 2019/12/18 6:15 p.m.6 views

CVE-2019-8553

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2. Clicking a malicious SMS link may lead to arbitrary code execution...

8.8CVSS7.7AI score0.01833EPSS
SaveExploits0References3
OSV
OSV
added 2019/03/28 12:29 a.m.7 views

CVE-2019-1747

A vulnerability in the implementation of the Short Message Service SMS handling functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper...

8.6CVSS7.3AI score0.0239EPSS
SaveExploits0References2
OSV
OSV
added 2018/11/06 5:29 p.m.10 views

CVE-2018-9362

In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions:...

7.5CVSS5.9AI score0.0156EPSS
SaveExploits0References2
OSV
OSV
added 2018/07/02 1:29 p.m.10 views

CVE-2017-17175

Short Message Service SMS module of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.354C00 has a Denial of Service DoS vulnerability. An unauthenticated attacker may set up a pseudo base station, and send special malware text message to the phone, causing the mobile phone ...

6.5CVSS5.8AI score0.00389EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/04/24 12:00 a.m.8 views

Apple iOS Telephony Denial of Service Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices.APNs are a component of the push notification service.Telephony is a component that provides telephony capabilities. A security vulnerability exists in the Telephony component in Apple iOS versions prior to 11.3. A remote...

7.8CVSS6.4AI score0.03209EPSS
SaveExploits0References1
OSV
OSV
added 2016/10/31 10:59 a.m.7 views

CVE-2016-7989

On Samsung Galaxy S4 through S7 devices, a malformed OTA WAP PUSH SMS containing an OMACP message sent remotely triggers an unhandled ArrayIndexOutOfBoundsException in Samsung's implementation of the WifiServiceImpl class within wifi-service.jar. This causes the Android runtime to continually...

7.5CVSS5.8AI score0.00604EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:00 a.m.19 views

The vulnerability of the iOS operating system, which allows a malicious actor to trigger a service failure

The vulnerability in the CoreTelephony component allows a remote attacker to trigger a service failure by sending specially crafted Class 0 SMS messages...

7.8CVSS5.5AI score0.02555EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2015/08/22 12:00 a.m.8 views

Google Android SMS and MMS Message Tampering Vulnerability

Google Android is an open source operating system based on Linux, mainly used in portable devices. A security vulnerability exists in Google Android, which allows malicious applications to exploit the vulnerability to tamper with the sending and receiving status of SMS and MMS messages to carry o...

5.5CVSS6.8AI score0.00209EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2015/07/02 12:00 a.m.12 views

The vulnerability of the iOS operating system, which allows a hacker to trigger a device service failure.

The vulnerability of the iOS operating system is related to errors in the code. Exploiting this vulnerability allows a malicious actor to cause a device to fail to respond to service requests by sending a specially crafted Unicode text message, which is not properly processed when sent via SMS or...

7.8CVSS6.6AI score0.05548EPSS
SaveExploits1References8Affected Software1
RedHat Linux
RedHat Linux
added 2011/05/19 11:05 a.m.8 views

Pidgin: Multiple NULL pointer dereference flaws in Yahoo protocol plug-in

libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows 1 remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a malformed YMSG notification packet, and allows 2 remote Yahoo! servers to cause a denial of...

4CVSS5.8AI score0.03011EPSS
SaveExploits0References4
OSV
OSV
added 2011/03/14 7:55 p.m.6 views

DEBIAN-CVE-2011-1091

libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows 1 remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a malformed YMSG notification packet, and allows 2 remote Yahoo! servers to cause a denial of...

4CVSS6.4AI score0.03011EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2006/04/25 12:00 a.m.10 views

PT-2006-2923 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.x through 0.10.14 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash due to a null dereference. This can be achieved via an invalid display filter or through various...

5CVSS6.3AI score0.02636EPSS
SaveExploits0References32
NVD
NVD
added 2003/12/31 5:00 a.m.13 views

CVE-2003-1464

Buffer overflow in Siemens 45 series mobile phones allows remote attackers to cause a denial of service disconnect and unavailable inbox via a Short Message Service SMS message with a long image name...

7.8CVSS6.8AI score0.01818EPSS
SaveExploits0References4
Rows per page
Query Builder