Lucene search
+L

14602 matches found

Prion
Prion
added 2024/01/02 3:15 a.m.25 views

Out-of-bounds

In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161825; Issue ID: MOLY01161825 MSV-895...

5CVSS7.2AI score0.00412EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2024/01/02 3:15 a.m.40 views

Out-of-bounds

In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161830; Issue ID: MOLY01161830 MSV-894...

5CVSS7.2AI score0.00948EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/01/02 2:50 a.m.5 views

CVE-2023-32889

In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161825; Issue ID: MOLY01161825 MSV-895...

7.5AI score0.00412EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/01/02 2:50 a.m.34 views

CVE-2023-32889

In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161825; Issue ID: MOLY01161825 MSV-895...

7.6AI score0.00412EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/02 2:50 a.m.59 views

CVE-2023-32889

CVE-2023-32889 affects the Modem IMS Call UA component, where a missing bounds check enables an out-of-bounds write leading to remote denial of service without user interaction. The issue is documented across NVD, Red Hat, PRION, CVE listings, and related advisories, with a patch ID MOLY01161825 ...

7.5CVSS7.4AI score0.00412EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/02 2:50 a.m.41 views

CVE-2023-32888

In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161830; Issue ID: MOLY01161830 MSV-894...

7.6AI score0.00948EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/01/02 2:50 a.m.10 views

CVE-2023-32888

In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161830; Issue ID: MOLY01161830 MSV-894...

7.5AI score0.00948EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/01/02 12:00 a.m.13 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from a lack of boundary checking in the Modem IMS Call UA module, which may result in out-of-bounds writes...

7.5CVSS6.8AI score0.00412EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/01/02 12:00 a.m.29 views

GitLab 13.0 < 14.2.6 / 14.3 < 14.3.4 / 14.4 < 14.4.1 (CVE-2021-39903)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - In all versions of GitLab CE/EE since version 13.0, a privileged user, through an API call, can change the visibility level of a group or a project to a restricted option even after the instance...

6.5CVSS6.5AI score0.01135EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/01/02 12:00 a.m.20 views

PT-2024-1912 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a null pointer dereference in the ice ptp.c file of the Linux kernel, specifically with the devm kasprintf function, which can return a null pointer upon failur...

9.8CVSS6.4AI score0.08555EPSS
SaveExploits3References991
CNNVD
CNNVD
added 2024/01/02 12:00 a.m.10 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from a lack of boundary checking in the Modem IMS Call UA module, which may result in out-of-bounds writes...

7.5CVSS6.8AI score0.00948EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/01/01 12:00 a.m.15 views

PT-2024-5261 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform software affected versions not specified Description: The issue is related to a memory corruption problem that occurs when an invoke call and a TEE call are bound for the same trusted application. It is also...

7.8CVSS7.7AI score0.00103EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/01/01 12:00 a.m.20 views

PT-2024-12365 · Unknown · Modem Ims Call Ua

Name of the Vulnerable Software and Affected Versions: Modem IMS Call UA affected versions not specified Description: In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges...

7.5CVSS7.5AI score0.00948EPSS
SaveExploits0References5
OSV
OSV
added 2023/12/30 3:15 a.m.10 views

CVE-2023-38021

An issue was discovered in Fortanix EnclaveOS Confidential Computing Manager CCM Platform before 3.32 for Intel SGX. Lack of pointer-alignment validation logic in entry functions allows a local attacker to access unauthorized information. This relates to the enclaveecall function and system call...

5.5CVSS5.8AI score0.00205EPSS
SaveExploits0References5
NVD
NVD
added 2023/12/30 3:15 a.m.133 views

CVE-2023-38021

An issue was discovered in Fortanix EnclaveOS Confidential Computing Manager CCM Platform before 3.32 for Intel SGX. Lack of pointer-alignment validation logic in entry functions allows a local attacker to access unauthorized information. This relates to the enclaveecall function and system call...

5.5CVSS0.00205EPSS
SaveExploits0References5
Prion
Prion
added 2023/12/30 3:15 a.m.27 views

Design/Logic Flaw

An issue was discovered in Fortanix EnclaveOS Confidential Computing Manager CCM Platform before 3.32 for Intel SGX. Lack of pointer-alignment validation logic in entry functions allows a local attacker to access unauthorized information. This relates to the enclaveecall function and system call...

1.7CVSS6.9AI score0.00205EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2023/12/30 12:00 a.m.51 views

CVE-2023-38021

An issue was discovered in Fortanix EnclaveOS Confidential Computing Manager CCM Platform before 3.32 for Intel SGX. Lack of pointer-alignment validation logic in entry functions allows a local attacker to access unauthorized information. This relates to the enclaveecall function and system call...

5.6AI score0.00205EPSS
SaveExploits0References5
Prion
Prion
added 2023/12/29 11:15 a.m.29 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bit Assist Chat Widget: WhatsApp Chat, Facebook Messenger Chat, Telegram Chat Bubble, Line Messenger, Live Chat Support Chat Button, WeChat, SMS, Call Button, Customer Support Button with floating...

4.3CVSS7AI score0.00328EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/29 10:58 a.m.35 views

CVE-2023-51371 WordPress Bit Assist Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bit Assist Chat Widget: WhatsApp Chat, Facebook Messenger Chat, Telegram Chat Bubble, Line Messenger, Live Chat Support Chat Button, WeChat, SMS, Call Button, Customer Support Button with floating...

5.9CVSS5.9AI score0.00328EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/29 10:58 a.m.68 views

CVE-2023-51371

The CVE-2023-51371 entry concerns the WordPress Bit Assist Plugin (

5.9CVSS5.1AI score0.00328EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder