Lucene search
+L

2835 matches found

Redos
Redos
added 2021/12/24 12:0 a.m.22 views

ROS-20211223-05

Asterisk computer telephony application vulnerability involves an input validation error. Exploitation The vulnerability could allow a remote attacker to send a packet containing an unsupported multimedia format and perform a denial of service DoS attack. unsupported media format and perform a...

7.5CVSS7.2AI score0.0911EPSS
SaveExploits1
NVD
NVD
added 2021/12/08 3:15 p.m.33 views

CVE-2021-25512

An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities...

7.8CVSS0.00103EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/08 3:15 p.m.10 views

CVE-2021-25512

An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities...

7.8CVSS7.1AI score0.00103EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/08 3:15 p.m.25 views

Input validation

An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities...

4.6CVSS7.5AI score0.00103EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/12/08 2:19 p.m.37 views

CVE-2021-25512

An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities...

6.1CVSS7.8AI score0.00103EPSS
SaveExploits0References1
CVE
CVE
added 2021/12/08 2:19 p.m.51 views

CVE-2021-25512

CVE-2021-25512 affects the Samsung telephony stack. Connected documents indicate an improper validation vulnerability in telephony prior to Samsung SMR Dec-2021 Release 1, allowing attackers to launch certain activities. Affected: telephony component on Samsung devices (prior to SMR Dec-2021 Rele...

7.8CVSS7.5AI score0.00103EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2021/11/05 12:0 a.m.17 views

Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability (CNVD-2021-103095)

Cisco Unified Communications Manager is a call processing component of Cisco's Unified Communications System. The component provides a scalable, distributable, and highly available enterprise IP telephony call processing solution.A cross-site request forgery vulnerability exists in Cisco Unified...

6.5CVSS1.8AI score0.00486EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/10/21 12:0 a.m.9 views

The vulnerability of the Voice Telephony Service Provider (VTSP) for Cisco IOS XE and Cisco IOS operating systems allows attackers to perform arbitrary actions on the vulnerable device.

The vulnerability of the Voice Telephony Service Provider VTSP for Cisco IOS XE and Cisco IOS operating systems is related to errors during the validation of strings in the Foreign Exchange Office FXO interfaces. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions ...

5.3CVSS6AI score0.01006EPSS
SaveExploits0References2Affected Software1
Apple
Apple
added 2021/09/23 12:0 a.m.88 views

About the security content of iOS 12.5.5

About the security content of iOS 12.5.5 This document describes the security content of iOS 12.5.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.3CVSS9AI score0.75994EPSS
SaveExploits2References1Affected Software1
Cisco
Cisco
added 2021/09/22 4:0 p.m.73 views

Cisco IOS and IOS XE Software FXO Interface Destination Pattern Bypass Vulnerability

A vulnerability in the Voice Telephony Service Provider VTSP service of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass configured destination patterns and dial arbitrary numbers. This vulnerability is due to insufficient validation of dial...

5.3CVSS5.4AI score0.01006EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/09/22 4:0 p.m.5 views

CVE-2021-34705

A vulnerability in the Voice Telephony Service Provider VTSP service of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass configured destination patterns and dial arbitrary numbers. This vulnerability is due to insufficient validation of dial...

5.3CVSS6.3AI score0.01006EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/09/22 12:0 a.m.6 views

PT-2021-4467 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Voice Telephony Service Provider VTSP service could allow an unauthenticated, remote attacker to bypass configured destination...

5.3CVSS5.2AI score0.01006EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/09/20 12:0 a.m.8 views

Apple iOS和Apple iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS 15 and iPadOS 15, which stems from a logic issue within the Telephony...

7.5CVSS7.5AI score0.01255EPSS
SaveExploits0References11
Apple
Apple
added 2021/09/13 12:0 a.m.93 views

About the security content of watchOS 7.6.2

About the security content of watchOS 7.6.2 This document describes the security content of watchOS 7.6.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

7.8CVSS7.8AI score0.75994EPSS
SaveExploits2References1Affected Software1
Apple
Apple
added 2021/09/13 12:0 a.m.55 views

About the security content of iOS 14.8 and iPadOS 14.8

About the security content of iOS 14.8 and iPadOS 14.8 This document describes the security content of iOS 14.8 and iPadOS 14.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

9.8CVSS9.8AI score0.75994EPSS
SaveExploits3References1Affected Software2
CNVD
CNVD
added 2021/08/25 12:0 a.m.16 views

D-Link DVX-2000MS Default Account Vulnerability

A security vulnerability exists in the D-Link DVX-2000MS, a hardware for IP telephony systems from D-Link in Taiwan, China. file contains hard-coded credentials that do not record user accounts. An attacker could exploit this vulnerability to recover plaintext passwords from hash values...

9.8CVSS2.1AI score0.01679EPSS
SaveExploits1References1
OSV
OSV
added 2021/07/21 3:15 p.m.7 views

CVE-2021-2398

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite component: Region Mapping. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

8.1CVSS7.3AI score0.00987EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/21 3:15 p.m.9 views

CVE-2021-2361

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: SDK client integration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

8.1CVSS7.3AI score0.00931EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/21 3:15 p.m.30 views

CVE-2021-2361

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: SDK client integration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

8.1CVSS0.00931EPSS
SaveExploits0References1
Prion
Prion
added 2021/07/21 3:15 p.m.17 views

Design/Logic Flaw

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: SDK client integration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

5.5CVSS8AI score0.00931EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder