Lucene search
+L

1170 matches found

Positive Technologies
Positive Technologies
added 2024/01/08 12:00 a.m.6 views

PT-2024-12782 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: The issue is related to out-of-bounds write vulnerabilities in the VZT vzt rd process block autosort functionality. A specially crafted .vzt file can lead to arbitrary code execution when a victim opens th...

7.8CVSS8.2AI score0.01493EPSS
SaveExploits82References131
Positive Technologies
Positive Technologies
added 2024/01/08 12:00 a.m.9 views

PT-2024-12533 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a...

7.8CVSS8.5AI score0.01493EPSS
SaveExploits82References133
Positive Technologies
Positive Technologies
added 2024/01/08 12:00 a.m.13 views

PT-2024-12587 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: An integer overflow issue exists in the fstReaderIterBlocks2 function's temp signal value buf allocation, allowing arbitrary code execution through a specially crafted .fst file. A victim must open a...

7.8CVSS8.2AI score0.01493EPSS
SaveExploits82References132
NVD
NVD
added 2023/12/15 4:15 p.m.24 views

CVE-2023-5310

A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 Gecko SDK v4.3.3 and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device...

6.5CVSS0.00348EPSS
SaveExploits0References2
OSV
OSV
added 2023/12/15 4:15 p.m.12 views

CVE-2023-5310

A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 Gecko SDK v4.3.3 and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device...

6.5CVSS5.8AI score0.00348EPSS
SaveExploits0References2
Prion
Prion
added 2023/12/15 4:15 p.m.29 views

Denial of service

A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 Gecko SDK v4.3.3 and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device...

3.3CVSS7.1AI score0.00348EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/12/15 4:05 p.m.79 views

CVE-2023-5310

CVE-2023-5310 describes a denial-of-service vulnerability affecting Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. The issue arises when devices on the network receive a stream of packets, leading to availability impact. Affected com...

6.5CVSS5.9AI score0.00348EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/12/15 4:05 p.m.35 views

CVE-2023-5310 Z-Wave Denial of Service caused by Stream of Packets

A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 Gecko SDK v4.3.3 and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device...

5.7CVSS6.6AI score0.00348EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/12/15 4:05 p.m.21 views

CVE-2023-5310 Z-Wave Denial of Service caused by Stream of Packets

A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 Gecko SDK v4.3.3 and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device...

5.7CVSS7.1AI score0.00348EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/12/15 12:00 a.m.13 views

PT-2023-32030 · Silicon · Gecko Sdk +1

Name of the Vulnerable Software and Affected Versions: Silicon Labs Z-Wave controller and endpoint devices versions prior to Z-Wave SDK v7.20.3 Gecko SDK v4.3.3 Description: A denial of service issue exists, allowing an attack to be carried out by devices on the network sending a stream of packet...

6.5CVSS7.1AI score0.00348EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/12/15 12:00 a.m.13 views

Z-Wave Security Breach

Z-Wave is a wireless communication protocol used primarily for home automation. It is a mesh network that uses low-power radio waves to communicate from device to device to wirelessly control appliances and other devices in the home, such as controlling lighting, security systems, thermostats,...

6.5CVSS6.8AI score0.00348EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2023/12/02 1:15 a.m.12 views

CVE-2023-49914

InteraXon Muse 2 devices allow remote attackers to cause a denial of service incorrect Muse App report of an outstanding, calm meditation state via a 480 MHz RF carrier that is modulated by a "false" brain wave, aka a Brain-Hack attack. For example, the Muse App does not display the reception of ...

6.5CVSS6.5AI score0.00364EPSS
SaveExploits0References3
Fedora
Fedora
added 2023/11/22 1:23 a.m.37 views

[SECURITY] Fedora 39 Update: audiofile-0.3.6-36.fc39

The Audio File library is an implementation of the Audio File Library from SGI, which provides an API for accessing audio file formats like AIFF/AIFF-C, WAVE, and NeXT/Sun .snd/.au files. This library is used by the EsounD daemon. Install audiofile if you are installing EsounD or you need an API...

6.5CVSS6.6AI score0.01734EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2023/11/22 12:00 a.m.41 views

Fedora: Security Advisory for audiofile (FEDORA-2023-07669abb35)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.9AI score0.01734EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/13 8:15 a.m.12 views

CVE-2023-5747

Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave server application in camera device was vulnerable to command injection allowing an attacker to run arbitrary code. HanwhaVision has releas...

8.8CVSS6.4AI score0.00563EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/13 8:15 a.m.26 views

CVE-2023-5747

Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave server application in camera device was vulnerable to command injection allowing an attacker to run arbitrary code. HanwhaVision has releas...

8.8CVSS0.00563EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/13 8:15 a.m.22 views

Command injection

Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave server application in camera device was vulnerable to command injection allowing an attacker to run arbitrary code. HanwhaVision has releas...

6.5CVSS8.6AI score0.00563EPSS
SaveExploits0References1Affected Software3
CVE
CVE
added 2023/11/13 7:48 a.m.74 views

CVE-2023-5747

CVE-2023-5747 affects Hanwha Vision Wave server application on camera devices. The flaw enables remote code execution via command injection during the installation process of Wave, allowing arbitrary code execution on the device. Public disclosures describe a vulnerability in the Wave server that...

8.8CVSS8.6AI score0.00563EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2023/11/13 7:48 a.m.41 views

CVE-2023-5747 Command injection via wave install file

Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave server application in camera device was vulnerable to command injection allowing an attacker to run arbitrary code. HanwhaVision has releas...

7.2CVSS9.4AI score0.00563EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/13 12:00 a.m.11 views

PT-2023-32301 · Hanwha Vision · Wave Server Application

Name of the Vulnerable Software and Affected Versions: Hanwha Vision Wave server application affected versions not specified Description: A flaw in the Wave server application allows for remote code execution during the installation of Wave on the camera device. The application is vulnerable to...

8.8CVSS9AI score0.00563EPSS
SaveExploits0References3
Rows per page
Query Builder