Lucene search
+L

196 matches found

OSV
OSV
added 2017/02/20 8:59 a.m.6 views

CVE-2016-7577

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "FaceTime" component, which allows remote attackers to trigger memory corruption and obtain audio data from a call that appeared to have ended...

3.7CVSS5.8AI score0.01121EPSS
SaveExploits0References3
NVD
NVD
added 2017/02/20 8:59 a.m.19 views

CVE-2016-7577

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "FaceTime" component, which allows remote attackers to trigger memory corruption and obtain audio data from a call that appeared to have ended...

4.3CVSS3.4AI score0.01121EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2017/02/20 8:59 a.m.5 views

CVE-2016-7577

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "FaceTime" component, which allows remote attackers to trigger memory corruption and obtain audio data from a call that appeared to have ended...

4.3CVSS5.8AI score0.01121EPSS
SaveExploits0References4
Prion
Prion
added 2017/02/20 8:59 a.m.18 views

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "FaceTime" component, which allows remote attackers to trigger memory corruption and obtain audio data from a call that appeared to have ended...

4.3CVSS6.2AI score0.01121EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2017/02/20 8:35 a.m.32 views

CVE-2016-7577

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "FaceTime" component, which allows remote attackers to trigger memory corruption and obtain audio data from a call that appeared to have ended...

3.7AI score0.01121EPSS
SaveExploits0References3
The Hacker News
The Hacker News
added 2017/01/16 4:37 a.m.21 views

Court Documents Reveal How Feds Spied On Connected Cars For 15 Years

It's not always necessary to break into your computer or smartphone to spy on you. Today all are day-to-day devices are becoming more connected to networks than ever to add convenience and ease to daily activities. But here's what we forget: These connected devices can be turned against us becaus...

6.5AI score
SaveExploits0
OSV
OSV
added 2016/08/05 8:59 p.m.8 views

CVE-2016-3830

codecs/aacdec/SoftAAC2.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service device hang or reboot via crafted ADTS data, aka internal bug 29153599...

5.5CVSS7.3AI score0.00574EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:00 a.m.9 views

The vulnerability of the Firefox browser allows a malicious individual to execute arbitrary code, gain access to confidential information, or cause a service failure.

The Mozilla Firefox browser contains a vulnerability related to errors in the implementation of the mozilla::WaveReader::DecodeAudioData function. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the dynamic memory of the process, trigger servi...

6.8CVSS7AI score0.02826EPSS
SaveExploits2References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:00 a.m.10 views

The vulnerability of the Mozilla SeaMonkey software package allows a malicious individual to execute arbitrary code, gain access to confidential information, or cause a service failure.

Mozilla SeaMonkey software contains a vulnerability related to errors in the implementation of the Mozilla::WaveReader::DecodeAudioData function. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the dynamic memory of the process, trigger servic...

6.8CVSS7AI score0.02826EPSS
SaveExploits2References5
OSV
OSV
added 2015/09/06 2:59 a.m.12 views

CVE-2015-6820

The ffsbrapply function in libavcodec/aacsbr.c in FFmpeg before 2.7.2 does not check for a matching AAC frame syntax element before proceeding with Spectral Band Replication calculations, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have...

9.3AI score
SaveExploits0References5
OpenVAS
OpenVAS
added 2015/08/19 12:00 a.m.47 views

Mozilla Firefox ESR Multiple Vulnerabilities (Aug 2015) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

10CVSS7.4AI score0.09027EPSS
SaveExploits0References4
myhack58
myhack58
added 2015/08/03 12:00 a.m.28 views

Android and then exposed the new vulnerability: remote causing the user can not receive calls-vulnerability warning-the black bar safety net

! This week is is the Android device the“Black week”, a few days ago has just been broke Stagefight media library on there worth a“heart blood”of high-risk vulnerabilities, this two-day security researchers then aeration may be the remote cause of the Android device is not properly connected to t...

1.3AI score
SaveExploits0
CNVD
CNVD
added 2015/03/23 12:00 a.m.8 views

Cisco Small Business IP phones SPA 300 and SPA 500 Information Disclosure Vulnerabilities

Cisco Small Business IP phones SPA 300 and SPA 500 are the SPA 300 and SPA 500 series of IP VoIP products from Cisco. A security vulnerability exists in the default configuration of Cisco Small Business IP phones SPA 300 version 7.5.5 and SPA 500 version 7.5.5. Because the program fails to set up...

6.4CVSS7.1AI score0.0175EPSS
SaveExploits0References1
NVD
NVD
added 2014/10/08 10:55 a.m.24 views

CVE-2014-3187

Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict processing of 1 facetime:// and 2 facetime-audio:// URLs, which allows remote attackers to obtain video and audio data from a device via a crafted web site...

6.8CVSS6AI score0.00812EPSS
SaveExploits0References4
CVE
CVE
added 2014/10/08 10:00 a.m.54 views

CVE-2014-3187

Vulnerability CVE-2014-3187 affects Google Chrome on iOS: Chrome versions prior to 37.0.2062.60 and 38.x prior to 38.0.2125.59 fail to restrict processing of facetime:// and facetime-audio:// URLs, allowing a crafted website to obtain video and audio data from the device. Affected component is th...

6.8CVSS6.2AI score0.00812EPSS
SaveExploits0References4Affected Software2
ATTACKERKB
ATTACKERKB
added 2014/03/19 10:55 a.m.8 views

CVE-2014-1497

The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process heap memory, cause a denial of service out-of-bounds read and...

8.8CVSS7.6AI score0.02826EPSS
SaveExploits2References15
RedHat Linux
RedHat Linux
added 2014/03/18 8:34 p.m.9 views

Mozilla: Out of bounds read during WAV file decoding (MFSA 2014-17)

The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process heap memory, cause a denial of service out-of-bounds read and...

8.8CVSS7.1AI score0.02826EPSS
SaveExploits2References5
OpenVAS
OpenVAS
added 2013/10/03 12:00 a.m.28 views

Fedora Update for nas FEDORA-2013-17036

Check for the Version of nas OpenVAS Vulnerability Test Fedora Update for nas FEDORA-2013-17036 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

7.5CVSS6.3AI score0.0408EPSS
SaveExploits2References2
Fedora
Fedora
added 2013/09/27 12:40 a.m.30 views

[SECURITY] Fedora 18 Update: nas-1.9.3-4.fc18

In a nutshell, NAS is the audio equivalent of an X display server. The Network Audio System NAS was developed by NCD for playing, recording, and manipulating audio data over a network. Like the X Window System, it uses the client/server model to separate applications from the specific drivers tha...

7.5CVSS1.7AI score0.0408EPSS
SaveExploits2
Fedora
Fedora
added 2013/09/27 12:33 a.m.32 views

[SECURITY] Fedora 19 Update: nas-1.9.3-7.fc19

In a nutshell, NAS is the audio equivalent of an X display server. The Network Audio System NAS was developed by NCD for playing, recording, and manipulating audio data over a network. Like the X Window System, it uses the client/server model to separate applications from the specific drivers tha...

7.5CVSS1.7AI score0.0408EPSS
SaveExploits2
Rows per page
Query Builder