1161 matches found
speex: divide by zero in read_samples() via crafted WAV file
A divide-by-zero flaw was found in speex within the readsamples at src/speexenc.c function. This flaw allows a malicious user to provide a crafted wav file and crash the speexenc utility, resulting in a denial of service. The highest threat from this vulnerability is to system availability...
Update 20.7 for Microsoft Dynamics 365 Business Central (on-premises) 2022 Release Wave 1 (Application Build 20.7.48483, Platform Build 20.0.48457)
None None...
Update 21.1 for Microsoft Dynamics 365 Business Central (on-premises) 2022 Release Wave 2 (Application Build 21.1.48638, Platform Build 21.0.48504)
None None...
The vulnerability of the Video microprogramming system component in Qualcomm’s embedded chips allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the Video microprogramming software component in Qualcomm’s embedded chips relates to the copying of buffers without checking the size of the input data during the processing of WAV files. Exploiting this vulnerability can allow an attacker to cause service failures or execut...
wave-publishers.co.jp Cross Site Scripting vulnerability OBB-2934143
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
TOTOLINK A3002R Buffer Overflow Vulnerability
The TOTOLINK A3002R is a wireless dual-band Gigabit router from China's TOTOLINK that complies with the latest IEEE802.11ac Wave 2 standard. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that can be exploited by attackers to cause a denial of service...
CVE-2021-33844
A floating point exception divide-by-zero issue was discovered in SoX in functon startread of wav.c file. An attacker with a crafted wav file, could cause an application to crash...
SoX 数字错误漏洞
SoX is a set of open source audio processing tools. The product supports playing, converting and recording audio in multiple formats. A security vulnerability exists in SoX, which stems from a floating point exception in the startread function of its wav.c component that causes the application to...
DENSO WAVE QR Code Generator 路径遍历漏洞
DENSO WAVE QR Code Generator is a QR code generator from DENSO WAVE Japan. A security vulnerability exists in DENSO WAVE QR Code Generator version v5.2.7. An attacker can exploit the vulnerability to perform directory traversal...
wave-concept.com Cross Site Scripting vulnerability OBB-2774380
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Malicious Package
Overview jubilee-flag-wave is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...
Malicious code in jubilee-flag-wave (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f99ba934904dde0c5fbcf3a66e34df594211986243c5712077ae4ea9ccc6b784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4083 Malicious code in jubilee-flag-wave (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f99ba934904dde0c5fbcf3a66e34df594211986243c5712077ae4ea9ccc6b784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Rakuten Mobile Rakuten Casa Access Control Error Vulnerability
Rakuten Mobile Rakuten Casa is a small base station from Rakuten Mobile Japan, Inc. It is used to improve radio wave conditions for users.An access control error vulnerability exists in Rakuten Mobile Rakuten Casa APFV200 version and APFV141 version, which stems from improper access restrictions....
cleanwavecarwashes.com Cross Site Scripting vulnerability OBB-2622199
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-24611
Denial of Service DoS in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows local attackers to block S0/S2 protected Z-Wave network via crafted S0 NonceGet Z-Wave packages, utilizing included but absent NodeIDs...
CVE-2022-24611
Denial of Service DoS in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows local attackers to block S0/S2 protected Z-Wave network via crafted S0 NonceGet Z-Wave packages, utilizing included but absent NodeIDs...
Design/Logic Flaw
Denial of Service DoS in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows local attackers to block S0/S2 protected Z-Wave network via crafted S0 NonceGet Z-Wave packages, utilizing included but absent NodeIDs...
CVE-2022-24611
Denial of Service DoS in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows local attackers to block S0/S2 protected Z-Wave network via crafted S0 NonceGet Z-Wave packages, utilizing included but absent NodeIDs...
CVE-2022-24611
The vulnerability CVE-2022-24611 affects Silicon Labs Z-Wave 500 series devices, specifically the Z-Wave S0 NonceGet protocol. The root cause is a DoS condition where crafted S0 NonceGet Z-Wave packets, using included but absent NodeIDs, allow local attackers to block S0/S2 protected Z-Wave netwo...