Microsoft is named a leader in the Forrester Wave for XDR

“Defenders think in lists, attackers think in graphs.”1 This remains a reality for the many organizations that operate across siloed security tools, fueling the demand on security operations SOC teams, as advanced cyberattacks continue to increase in frequency and speed. That’s where extended...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: step-fips, hey, cert-exporter-fips, jsonnet-bundler, secrets-store-csi-driver, configmap-reload, prometheus-pushgateway-fips, rclone, grafana-operator, local-static-provisioner, helm, chartmuseum, kubescape, neuvector-scanner, osv-scanner, docker-credential-gcr,...

CVE-2024-22472

A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2 running on Silicon Labs 500 series Z-wave devices...

CVE-2024-22472 Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow

A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2 running on Silicon Labs 500 series Z-wave devices...

CVE-2024-22472 Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow

A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2 running on Silicon Labs 500 series Z-wave devices...

CVE-2024-22472

Summary: CVE-2024-22472 concerns Silicon Labs 500 Series Z-Wave devices. A buffer overflow in the 500 Series SDK (versions prior to v6.85.2) can occur when processing certain frames (long S0 frames) on 500 Series Z‑Wave devices, leading to Denial of Service and potentially remote code execution. ...

PT-2024-19441 · Silicon · Silicon Labs 500 Series +1

Name of the Vulnerable Software and Affected Versions: Silicon Labs 500 Series Z-Wave devices versions prior to v6.85.2 Description: A buffer overflow issue may allow Denial of Service and potential remote code execution. This issue affects Silicon Labs 500 Series SDK running on Silicon Labs 500...

Silicon Labs 500 Series Z-Wave 安全漏洞

Silicon Labs Z-Wave Chipsets are a type of chipset in the smart home ecosystem from Silicon Labs. A security vulnerability exists in the Silicon Labs 500 Series Z-Wave. An attacker exploited the vulnerability to cause a denial of service and potentially remote code execution...

CVE-2024-33431

An issue in phiola/src/afilter/conv.c:115 of phiola v2.0-rc22 allows a remote attacker to cause a denial of service via a crafted .wav file...

PT-2024-25250 · Phiola · Phiola

Name of the Vulnerable Software and Affected Versions: phiola version 2.0-rc22 Description: The issue is a Buffer-Overflow vulnerability located at pcm convert.h:513. This vulnerability allows a remote attacker to execute arbitrary code via a crafted .wav file. Recommendations: For phiola version...

PT-2024-25253 · Phiola · Phiola

Name of the Vulnerable Software and Affected Versions: phiola version 2.0-rc22 Description: An issue in phiola's WAV file handling, specifically in the conv.c file, allows a remote attacker to cause a denial of service via a crafted .wav file. The issue is remotely exploitable. Recommendations: F...

phiola 安全漏洞

phiola is a fast audio player, recorder, and converter for Windows, Linux, and Android by Simon Zolin Personal Developer. A security vulnerability exists in phiola version v2.0-rc22, which stems from the presence of a buffer overflow vulnerability that could allow a remote attacker to execute...

PT-2024-25249 · Unknown · Stsaz Phiola

Name of the Vulnerable Software and Affected Versions: stsaz phiola version 2.0-rc22 Description: The issue is related to a Buffer-Overflow vulnerability at conv.c:68, which allows a remote attacker to execute arbitrary code via a crafted .wav file. Recommendations: For version 2.0-rc22, consider...

phiola 安全漏洞

phiola is a fast audio player, recorder, and converter for Windows, Linux, and Android by Simon Zolin Personal Developer. A security vulnerability exists in phiola version v2.0-rc22, which stems from the presence of a buffer overflow vulnerability that could allow a remote attacker to execute...

SiLabs Z-Wave over IP Gateway 安全漏洞

SiLabs Z-Wave over IP Gateway is a hardware unit that plugs into a Wi-Fi router and is used to add and configure Z-Wave devices as well as create and run "scenarios". A security vulnerability exists in SiLabs Z-Wave over IP Gateway v7.13.13 and earlier versions that exploits a vulnerability that...

andamanwavemaster.com Cross Site Scripting vulnerability OBB-3919074

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the Vorbis-tools package, related to the ability to write beyond the buffer boundaries in memory, allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Vorbis-tools package lies in its ability to write beyond the buffer boundaries in memory during the conversion of WAV files into OGG files. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...

OS Command Injection

gtkwave is vulnerable to OS Command Injection. The vulnerability is due to inadequate input validation in the decompression functionality in vcdmain, enabling attackers to execute arbitrary commands through a specially crafted wave file...

OS Command Injection

gtkwave is vulnerable to OS Command Injection. The vulnerability is due to insufficient input validation in the decompression functionality in the vcd2lxt utility, which allows attackers to execute arbitrary commands by exploiting a specially crafted wave file...

OS Command Injection

gtkwave is vulnerable to OS Command Injection. The vulnerability is due to inadequate input validation in the decompression functionality in the vcd2lxt2 utility, allowing attackers to execute arbitrary commands by crafting a specially crafted wave file...