Lucene search
+L

590 matches found

NVD
NVD
added 2022/08/30 5:15 a.m.15 views

CVE-2022-26527

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service...

6.5CVSS0.00435EPSS
Exploits0References1
Prion
Prion
added 2022/08/30 5:15 a.m.15 views

Buffer overflow

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service...

3.3CVSS6.7AI score0.00435EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2022/08/30 5:15 a.m.20 views

Buffer overflow

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for segmented packets’ link parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service...

3.3CVSS6.7AI score0.00435EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2022/08/30 5:15 a.m.16 views

Buffer overflow

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthenticated attacker in the adjacent network can exploit this vulnerability to disrupt service...

3.3CVSS6.7AI score0.00343EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2022/08/30 5:15 a.m.19 views

Buffer overflow

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the length of segmented packets’ shift parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service...

3.3CVSS6.7AI score0.00435EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/30 4:25 a.m.32 views

CVE-2022-26529 Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for segmented packets’ link parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service...

6.5CVSS6.9AI score0.00435EPSS
Exploits0References1
CVE
CVE
added 2022/08/30 4:25 a.m.57 views

CVE-2022-25635

The CVE-2022-25635 entry concerns Realtek Linux/Android Bluetooth Mesh SDK. Affected component: the Bluetooth Mesh SDK (Realtek) with a buffer overflow caused by insufficient validation of broadcast network packet length. According to sources, an unauthenticated attacker in an adjacent network ca...

6.5CVSS6.7AI score0.00343EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/30 4:25 a.m.30 views

CVE-2022-26527 Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service...

6.5CVSS6.9AI score0.00435EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/30 4:2 a.m.2 views

CVE-2022-26528

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the length of segmented packets’ shift parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service...

6.5CVSS6.1AI score0.00435EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/08/30 4:1 a.m.2 views

CVE-2022-26527

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service...

6.5CVSS6.1AI score0.00435EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/08/30 3:58 a.m.3 views

CVE-2022-25635

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthenticated attacker in the adjacent network can exploit this vulnerability to disrupt service...

6.5CVSS5.9AI score0.00343EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/08/30 12:0 a.m.6 views

PT-2022-17919 · Realtek · Realtek Linux/Android Bluetooth Mesh Sdk

Name of the Vulnerable Software and Affected Versions: Realtek Linux/Android Bluetooth Mesh SDK affected versions not specified Description: The issue is caused by insufficient validation for the size of segmented packets' reference parameter, leading to a buffer overflow. An unauthenticated...

6.5CVSS6.6AI score0.00435EPSS
Exploits0References4
NVD
NVD
added 2022/07/14 3:15 p.m.14 views

CVE-2022-2393

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not b...

5.7CVSS0.00235EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/14 3:15 p.m.3 views

CVE-2022-2393

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not b...

5.7CVSS5.8AI score0.00235EPSS
Exploits0References5
OSV
OSV
added 2022/07/14 3:15 p.m.5 views

DEBIAN-CVE-2022-2393

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not b...

5.7CVSS6.1AI score0.00235EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2022/07/14 3:15 p.m.52 views

CVE-2022-2393

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not b...

5.7CVSS6.5AI score0.00235EPSS
Exploits0References2
Prion
Prion
added 2022/07/14 3:15 p.m.21 views

Directory traversal

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not b...

2.7CVSS5.5AI score0.00235EPSS
Exploits0References1Affected Software3
Debian CVE
Debian CVE
added 2022/07/14 2:53 p.m.27 views

CVE-2022-2393

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not b...

5.7CVSS5.6AI score0.00235EPSS
Exploits0
Cvelist
Cvelist
added 2022/07/14 2:53 p.m.35 views

CVE-2022-2393

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not b...

5.6AI score0.00235EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2022/05/14 11:39 a.m.43 views

CVE-2020-8558

A flaw was found in Kubernetes that allows attackers on adjacent networks to reach services exposed on localhost ports, previously thought to be unreachable. This flaw allows an attacker to gain privileges or access confidential information for any services listening on localhost ports that are n...

5.8CVSS8.3AI score0.03597EPSS
Exploits5References4
Rows per page
Query Builder