Lucene search
+L

3335 matches found

CNVD
CNVD
•added 2024/11/07 12:00 a.m.•48 views

Huawei HarmonyOS Access Control Error Vulnerability (CNVD-2024-45894)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from an Access Control Error vulnerability that stems from improper memory access in the Telephony Services module. An attacker coul...

5.5CVSS6.6AI score0.00115EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/05 12:00 a.m.•24 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from an Access Control Error vulnerability that stems from improper memory access in the Telephony Services module. An attacker coul...

5.5CVSS6.7AI score0.00115EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/10/11 12:00 a.m.•16 views

The vulnerability of Windows Telephony operating systems allows attackers to execute arbitrary code.

The vulnerability of Windows Telephony operating systems involves overflow in the dynamic memory buffer. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS6AI score0.00985EPSS
SaveExploits0References2
NVD
NVD
•added 2024/10/08 6:15 p.m.•21 views

CVE-2024-43518

Windows Telephony Server Remote Code Execution Vulnerability...

8.8CVSS0.00985EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/08 6:15 p.m.•7 views

CVE-2024-43518

Windows Telephony Server Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.00985EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/08 5:35 p.m.•34 views

CVE-2024-43518 Windows Telephony Server Remote Code Execution Vulnerability

...

8.8CVSS0.00985EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/08 5:35 p.m.•123 views

CVE-2024-43518

CVE-2024-43518 is associated with Windows Telephony Server, categorized (in the ENISA/NCSC context) as a high-severity remote code execution vulnerability with an 8.80 CVSS score and impact of executing arbitrary code. The connected advisory set indicates Microsoft has issued updates to fix Windo...

8.8CVSS9.1AI score0.00985EPSS
SaveExploits0References1Affected Software15
Vulnrichment
Vulnrichment
•added 2024/10/08 5:35 p.m.•19 views

CVE-2024-43518 Windows Telephony Server Remote Code Execution Vulnerability

...

8.8CVSS7.2AI score0.00985EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2024/10/08 7:00 a.m.•30 views

Windows Telephony Server Remote Code Execution Vulnerability

...

8.8CVSS7.1AI score0.00985EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/10/08 12:00 a.m.•17 views

Microsoft Windows Telephony Server 安全漏洞

Microsoft Windows Telephony Server is a component of Microsoft Corporation USA that supports the Telephony Application Programming Interface TAPI, which allows computer programs to communicate with shared telephony services. A security vulnerability exists in Microsoft Windows Telephony Server. A...

8.8CVSS6.3AI score0.00985EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/10/08 12:00 a.m.•16 views

PT-2024-6760 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Server affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory, which can be exploited by a remote attacker to execute arbitrary code. This can affect the system...

10CVSS7.6AI score0.00985EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/08 12:00 a.m.•3 views

CVE-2024-43518: Heap-based Buffer Overflow

Windows Telephony Server Remote Code Execution Vulnerability...

8.8CVSS7.9AI score0.00985EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/09/27 12:00 a.m.•20 views

Cisco IOS XE Software HTTP Server Telephony Services DoS (cisco-sa-httpsrvr-dos-yOZThut)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service DoS...

8.6CVSS5.6AI score0.0086EPSS
SaveExploits0References4
OSV
OSV
•added 2024/09/25 5:15 p.m.•15 views

CVE-2024-20436

A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to a null pointer dereference when accessin...

7.5CVSS5.8AI score0.0086EPSS
SaveExploits0References1
NVD
NVD
•added 2024/09/25 5:15 p.m.•30 views

CVE-2024-20436

A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to a null pointer dereference when accessin...

8.6CVSS0.0086EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/09/25 4:00 p.m.•45 views

Cisco IOS XE Software HTTP Server Telephony Services Denial of Service Vulnerability

A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to a null pointer dereference when accessin...

8.6CVSS7.9AI score0.0086EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/25 12:00 a.m.•2 views

CVE-2024-20436: NULL Pointer Dereference

A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to a null pointer dereference when accessin...

8.6CVSS7.5AI score0.0086EPSS
SaveExploits0References1
Redos
Redos
•added 2024/09/19 12:00 a.m.•32 views

ROS-20240918-14

A vulnerability in Asterisk and Certified Asterisk IP telephony management systems is related to errors in sending a SIP request to a URI. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service and shutdown...

5.7CVSS6.7AI score0.00581EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/09/06 12:00 a.m.•20 views

The vulnerability of Asterisk IP-telephony management systems and Certified Asterisk, related to errors in sending SIP requests to URIs, allows attackers to trigger an emergency termination of the application’s operation.

The vulnerability of Asterisk IP-telephony systems and Certified Asterisk is related to errors in sending SIP requests with URIs. Exploiting this vulnerability can allow a malicious actor to cause service failures and terminate operations remotely...

6.8CVSS5.4AI score0.00581EPSS
SaveExploits0References8Affected Software2
OSV
OSV
•added 2024/08/07 2:15 a.m.•16 views

CVE-2024-34617

Improper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows local attackers to configure default Message application...

3.3CVSS5.8AI score0.00126EPSS
SaveExploits0References1
Rows per page
Query Builder