Lucene search
+L

3589 matches found

Fedora
Fedora
added 2021/01/14 1:40 a.m.77 views

[SECURITY] Fedora 33 Update: adplug-2.3.3-1.fc33

AdPlug is a free software, cross-platform, hardware independent AdLib sound player library, mainly written in C++. AdPlug plays sound data, originally created for the AdLib OPL2/3 audio board, directly from its original format on top of an OPL2/3 emulator or by using the real hardware. No OPL2/3...

9.8CVSS0.7AI score0.02301EPSS
SaveExploits8
OpenVAS
OpenVAS
added 2021/01/14 12:0 a.m.24 views

Fedora: Security Advisory for adplug (FEDORA-2021-64168929e4)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.02301EPSS
SaveExploits8References2
NVD
NVD
added 2021/01/13 6:15 a.m.14 views

CVE-2020-35686

The SECOMN service in Sound Research DCHU model software component modules APO through 2.0.9.17, delivered on HP Windows 10 computers, may allow escalation of privilege via a fake DLL. As a resolution, Windows Update is being submitted for all affected products to update to 2.0.9.18 or later...

7.8CVSS7.9AI score0.00344EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/13 6:15 a.m.8 views

CVE-2020-35686

The SECOMN service in Sound Research DCHU model software component modules APO through 2.0.9.17, delivered on HP Windows 10 computers, may allow escalation of privilege via a fake DLL. As a resolution, Windows Update is being submitted for all affected products to update to 2.0.9.18 or later...

7.8CVSS5.8AI score0.00344EPSS
SaveExploits0References1
Prion
Prion
added 2021/01/13 6:15 a.m.17 views

Design/Logic Flaw

The SECOMN service in Sound Research DCHU model software component modules APO through 2.0.9.17, delivered on HP Windows 10 computers, may allow escalation of privilege via a fake DLL. As a resolution, Windows Update is being submitted for all affected products to update to 2.0.9.18 or later...

4.4CVSS7.8AI score0.00344EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/01/13 5:5 a.m.24 views

CVE-2020-35686

The SECOMN service in Sound Research DCHU model software component modules APO through 2.0.9.17, delivered on HP Windows 10 computers, may allow escalation of privilege via a fake DLL. As a resolution, Windows Update is being submitted for all affected products to update to 2.0.9.18 or later...

7.9AI score0.00344EPSS
SaveExploits0References1
CVE
CVE
added 2021/01/13 5:5 a.m.64 views

CVE-2020-35686

The CVE-2020-35686 issue affects the Sound Research DCHU software (SECOMN service) used on HP Windows 10 machines, up to version 2.0.9.17. Root cause is a privilege escalation via a fake DLL loaded by the SECOMN service. The documented impact is local privilege escalation with high severity; expl...

7.8CVSS7.8AI score0.00344EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/01/13 12:0 a.m.10 views

Sound Research DCHU Code Issue Vulnerability

Sound Research DCHU is a software module for audio post-processing drivers from Sound Research. A code issue vulnerability exists in Sound Research DCHU version 2.0.9.17, which allows an attacker to escalate privileges by uploading a fake DLL...

7.8CVSS7.2AI score0.00344EPSS
SaveExploits0References2
Huawei
Huawei
added 2021/01/13 12:0 a.m.25 views

Security Advisory - Insufficient Integrity Check Vulnerability in Huawei Sound X Product

There is an insufficient integrity check vulnerability in Huawei Sound X Product. The system does not check certain software package's integrity sufficiently. Successful exploit could allow an attacker to load a crafted software package to the device. Vulnerability ID: HWPSIRT-2020-00213 This...

6.8CVSS6.5AI score0.00156EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2021/01/06 12:0 a.m.100 views

Mozilla Rust Resource Management Error Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in http crate in versions of Mozilla Rust prior to 0.1.20, which stems from HeaderMap:: The Drain API can use raw pointers to corrupt sound effects. No details of the vulnerabilit...

9.8CVSS9.4AI score0.01812EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2020/12/10 11:30 a.m.68 views

DarkSide - Tool Information Gathering And Social Engineering

Features: Hacker Dashboard Hacker News thehackernews.com/ New Exploits Exploit-db.com Hacking Tutorials Video youtube.com The Latest Prices OF Digital Currencies Rials , Usd Information Gathering Bypass Cloud Flare Cms Detect Trace Toute Reverse IP Port Scan IP location Finder Show HTTP Header Fi...

7.4AI score
SaveExploits0References1
Veracode
Veracode
added 2020/12/06 4:37 a.m.25 views

Buffer Overflows

Sound eXchange is vulnerable to buffer overflows. Remote attackers could cause overflows using a crafted WAV file via AdpcmReadBlock function...

7.5CVSS6AI score0.07709EPSS
SaveExploits1References10Affected Software1
Veracode
Veracode
added 2020/12/06 3:21 a.m.23 views

Denial Of Service (DoS)

Sound eXchange is vulnerable to denial of service attacks. A heap-based buffer overflow in the ImaExpandS function of imarw.c could lead to a denial of service attack during conversion of an audio file...

5.5CVSS5.2AI score0.01717EPSS
SaveExploits1References5Affected Software1
RedHat Linux
RedHat Linux
added 2020/11/04 1:25 a.m.8 views

freerdp: Unchecked read of array offset in rdpsnd_recv_wave2_pdu

In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend alsa, oss, pulse, .... The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot...

4CVSS5.7AI score0.01538EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2020/10/30 11:30 a.m.70 views

eDEX-UI - A Cross-Platform, Customizable Science Fiction Terminal Emulator With Advanced Monitoring &Touchscreen Support

eDEX-UI is a fullscreen, cross-platform terminal emulator and system monitor that looks and feels like a sci-fi computer interface. Heavily inspired from the TRON Legacy movie effects especially the Board Room sequence, the eDEX-UI project was originally meant to be "DEX-UI with less « art » and...

7.7AI score
SaveExploits0References16
Kitploit
Kitploit
added 2020/10/12 11:30 a.m.49 views

Wave-Share - Serverless, Peer-To-Peer, Local File Sharing Through Sound

A proof-of-concept for WebRTC signaling using sound. Works with all devices that have microphone + speakers. Runs in the browser. Nearby devices negotiate the WebRTC connection by exchanging the necessary Session Description Protocol SDP data via a sequence of audio tones. Upon successful...

6.8AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2020/09/29 10:31 p.m.10 views

kernel: use-after-free in sound/core/timer.c

A memory flaw was found in the ALSA subsystem of the Linux kernel. The struct sndtimerinstance function fails the timer-maxinstances check leading to an invalid address. This could lead to a use-after-free vulnerability...

7.8CVSS7.1AI score0.00551EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2020/09/29 8:15 p.m.7 views

freerdp: Unchecked read of array offset in rdpsnd_recv_wave2_pdu

In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend alsa, oss, pulse, .... The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot...

4CVSS5.7AI score0.01538EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/09/29 7:0 p.m.11 views

kernel: use-after-free in sound/core/timer.c

A memory flaw was found in the ALSA subsystem of the Linux kernel. The struct sndtimerinstance function fails the timer-maxinstances check leading to an invalid address. This could lead to a use-after-free vulnerability...

7.8CVSS7.1AI score0.00551EPSS
SaveExploits1References4
NVD
NVD
added 2020/09/24 4:15 p.m.28 views

CVE-2020-12843

ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used...

9.8CVSS0.01308EPSS
SaveExploits1References2
Rows per page
Query Builder