Lucene search
+L

4122 matches found

OSV
OSV
added 2023/01/11 10:15 p.m.7 views

CVE-2017-16280

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS6.4AI score0.00673EPSS
SaveExploits0References1
OSV
OSV
added 2023/01/11 10:15 p.m.9 views

CVE-2017-16284

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS6.4AI score0.00673EPSS
SaveExploits0References1
OSV
OSV
added 2023/01/11 10:15 p.m.8 views

CVE-2017-16260

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS6.4AI score0.00853EPSS
SaveExploits1References1
Prion
Prion
added 2023/01/11 10:15 p.m.20 views

Buffer overflow

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

6.5CVSS9.8AI score0.00853EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/11 12:0 a.m.9 views

PT-2023-10565 · Unknown · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel. Specially crafted commands sent through the PubNub service can cause a stack-based buffer...

9.9CVSS8.9AI score0.00673EPSS
SaveExploits0References5
OSV
OSV
added 2022/12/14 9:15 p.m.24 views

CVE-2022-46340

A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local...

8.8CVSS8.7AI score
SaveExploits0References8
Prion
Prion
added 2022/12/14 9:15 p.m.26 views

Design/Logic Flaw

A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local...

6.5CVSS8.6AI score0.02484EPSS
SaveExploits0References8Affected Software3
RedhatCVE
RedhatCVE
added 2022/12/14 5:4 a.m.34 views

CVE-2022-46340

A vulnerability was found in X.Org. The issue occurs due to the swap handler for the XTestFakeInput request of the XTest extension, possibly corrupting the stack if GenericEvents with lengths larger than 32 bytes are sent through the XTestFakeInput request. This flaw can lead to local privilege...

8.8CVSS8.8AI score0.02484EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2022/12/14 12:0 a.m.40 views

CVE-2022-46340

A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local...

8.8CVSS8.7AI score0.02484EPSS
SaveExploits0
CVE
CVE
added 2022/12/14 12:0 a.m.214 views

CVE-2022-46340

CVE-2022-46340 affects the X.Org X server. The issue is a stack overflow in the XTestSwapFakeInput path of the XTest extension, triggered when GenericEvents with lengths > 32 bytes are sent via XTestFakeInput. Reported consequences include local privilege elevation on privileged X servers and ...

8.8CVSS8.9AI score0.02484EPSS
SaveExploits0References8Affected Software1
AlpineLinux
AlpineLinux
added 2022/12/14 12:0 a.m.56 views

CVE-2022-46340

A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local...

8.8CVSS9.1AI score0.02484EPSS
SaveExploits0
Mageia
Mageia
added 2022/12/13 10:9 p.m.65 views

Updated netkit-telnet packages fix security vulnerability

2-byte DoS in netkit-telnetd. CVE-2022-39028...

7.5CVSS2AI score0.01665EPSS
SaveExploits1References2
Ubuntu
Ubuntu
added 2022/12/12 10:32 p.m.56 views

USN-5775-1: Vim vulnerabilities

It was discovered that Vim uses freed memory in recurisve substitution of specially crafted patterns. An attacker could possbly use this to crash Vim and cause denial of service. CVE-2022-2345 It was discovered that Vim makes illegal memory calls when patterns start with an illegal byte. An...

7.8CVSS7.8AI score0.01226EPSS
SaveExploits5
Fedora
Fedora
added 2022/12/11 1:47 a.m.41 views

[SECURITY] Fedora 35 Update: bcel-6.4.1-10.fc35

The Byte Code Engineering Library formerly known as JavaClass is intended to give users a convenient possibility to analyze, create, and manipulate binary Java class files those ending with .class. Classes are represented by objects which contain all the symbolic information of the given class:...

9.8CVSS1AI score0.02836EPSS
SaveExploits0
Fedora
Fedora
added 2022/12/11 1:40 a.m.53 views

[SECURITY] Fedora 36 Update: bcel-6.4.1-10.fc36

The Byte Code Engineering Library formerly known as JavaClass is intended to give users a convenient possibility to analyze, create, and manipulate binary Java class files those ending with .class. Classes are represented by objects which contain all the symbolic information of the given class:...

9.8CVSS1AI score0.02836EPSS
SaveExploits0
Fedora
Fedora
added 2022/12/11 1:27 a.m.48 views

[SECURITY] Fedora 37 Update: bcel-6.5.0-3.fc37

The Byte Code Engineering Library formerly known as JavaClass is intended to give users a convenient possibility to analyze, create, and manipulate binary Java class files those ending with .class. Classes are represented by objects which contain all the symbolic information of the given class:...

9.8CVSS1AI score0.02836EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2022/12/11 12:0 a.m.24 views

Fedora: Security Advisory for bcel (FEDORA-2022-0e358addb8)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.02836EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/12/11 12:0 a.m.19 views

Fedora: Security Advisory for bcel (FEDORA-2022-f60a52e054)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.02836EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2022/11/28 2:39 p.m.8 views

json-smart: Denial of Service in JSONParserByteArray function

A flaw was found in the json-smart package in the JSONParserByteArray. This flaw allows an attacker to cause a denial of service...

7.5CVSS7.3AI score0.023EPSS
SaveExploits1References4
Microsoft CVE
Microsoft CVE
added 2022/11/19 8:0 a.m.5 views

Read one byte past a buffer when normalizing Unicode

...

7.5CVSS6.1AI score0.00891EPSS
SaveExploits0
Rows per page
Query Builder