Lucene search
+L

8948 matches found

CNNVD
CNNVD
•added 2024/04/28 12:00 a.m.•24 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from a lack of boundary checking...

8.4CVSS6.4AI score0.00293EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2024/04/27 12:07 p.m.•24 views

CVE-2024-25048 IBM MQ code execution

IBM MQ Appliance 9.3 CD and LTS are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash. IBM X-Force ID: 283137...

7.5CVSS8AI score0.009EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/04/26 12:00 a.m.•19 views

Envoy proxy server Heap Buffer Overflow DoS

The vulnerability of the Envoy proxy server is related to improper checking of the error value of the pointer. Exploiting this vulnerability can allow a malicious actor to cause an unexpected termination of the application...

7.8CVSS7.5AI score0.00679EPSS
SaveExploits0References4Affected Software2
Tenable Nessus
Tenable Nessus
•added 2024/04/26 12:00 a.m.•120 views

Cisco Adaptive Security Appliance Software Web Services DoS Vulnerability (cisco-sa-asaftd-websrvs-dos-X8gNucD2)

According to its self-reported version, the remote Cisco ASA Software is affected by a denial of service DoS vulnerability, due to incomplete error checking when parsing HTTP headers. An unauthenticated, remote attacker can exploit this issue, via specially crafted HTTP request, to cause the syst...

8.6CVSS8.1AI score0.69824EPSS
SaveExploits1References2
NVD
NVD
•added 2024/04/24 6:15 p.m.•25 views

CVE-2024-0151

Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions CMSE, that has been compiled using toolchains that implement 'Arm v8-M Security Extensions Requirements on Development Tools' prior to version 1.4, allows an attacker to pass values to...

6.5CVSS6.5AI score0.00448EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/24 5:12 p.m.•22 views

CVE-2024-0151

Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions CMSE, that has been compiled using toolchains that implement 'Arm v8-M Security Extensions Requirements on Development Tools' prior to version 1.4, allows an attacker to pass values to...

7.1AI score0.00448EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/24 5:12 p.m.•34 views

CVE-2024-0151

Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions CMSE, that has been compiled using toolchains that implement 'Arm v8-M Security Extensions Requirements on Development Tools' prior to version 1.4, allows an attacker to pass values to...

6.7AI score0.00448EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/24 5:12 p.m.•95 views

CVE-2024-0151

Software utilizing Cortex-M Security Extensions (CMSE) is vulnerable to a security issue when compiled using toolchains that implement 'Arm v8-M Security Extensions Requirements on Development Tools' prior to version 1.4 . The root cause is insufficient argument checking in Secure state Entry fun...

6.5CVSS7.1AI score0.00448EPSS
SaveExploits0References1
Veracode
Veracode
•added 2024/04/24 3:13 a.m.•21 views

Stack-Buffer Overflow

sngrep is vulnerable to a Stack-Buffer Overflow. The vulnerability is due to inadequate bounds checking when copying 'Content-Length' and 'Warning' headers into fixed-size buffers in the sipvalidatepacket and sipparseextraheaders functions within src/sip.c. It allows remote attackers to execute...

9.8CVSS7AI score0.01838EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2024/04/24 12:00 a.m.•40 views

PT-2024-15359 · Arm · Arm Cortex-M Security Extensions

Name of the Vulnerable Software and Affected Versions: Software using Cortex-M Security Extensions CMSE compiled using toolchains that implement 'Arm v8-M Security Extensions Requirements on Development Tools' prior to version 1.4 Description: The issue is related to insufficient argument checkin...

6.5CVSS6.8AI score0.00448EPSS
SaveExploits0References7
CNVD
CNVD
•added 2024/04/23 12:00 a.m.•28 views

FFmpeg Buffer Overflow Vulnerability (CNVD-2024-27561)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in Ffmpeg version v.N113007-g8d24a28d06 due to incorrect bounds checking of libavfilter/avfshowwaves.c:722:24 in the showwavesfilterframe, which can b...

8CVSS8.1AI score0.00417EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/04/23 12:00 a.m.•25 views

FFmpeg Buffer Overflow Vulnerability (CNVD-2024-27560)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in Ffmpeg version v.N113007-g8d24a28d06 due to incorrect bounds checking in the libavfilter/avfshowspectrum.c:1789:52 component of the...

8CVSS7.8AI score0.00272EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/04/23 12:00 a.m.•36 views

FFmpeg buffer overflow vulnerability (CNVD-2024-27562)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in Ffmpeg version v.N113007-g8d24a28d06 due to incorrect bounds checking in libavfilter/freverse.c:269:26 in the areverserequestframe, which can be...

8CVSS7.3AI score0.00272EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/04/23 12:00 a.m.•60 views

FFmpeg buffer overflow vulnerability (CNVD-2024-27563)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in Ffmpeg version v.N113007-g8d24a28d06 due to incorrect bounds checking as a result of a floating-point exception FPE error at...

7.8CVSS7.3AI score0.00316EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/04/19 12:00 a.m.•19 views

Juniper Networks Forwarding Information Base Telemetry DoS

The vulnerability of the Forwarding Information Base Telemetry fibtd of Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

5.3CVSS6.6AI score0.00478EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
•added 2024/04/18 10:08 p.m.•15 views

CVE-2024-22186 Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking

The application suffers from a privilege escalation vulnerability. An attacker logged in as guest can escalate his privileges by poisoning the cookie to become administrator...

8.8CVSS5.9AI score0.00549EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/04/18 10:08 p.m.•53 views

CVE-2024-22186 Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking

The application suffers from a privilege escalation vulnerability. An attacker logged in as guest can escalate his privileges by poisoning the cookie to become administrator...

8.8CVSS9.2AI score0.00549EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/04/18 12:00 a.m.•22 views

Service Port Component Arbitrary Command Execution

The vulnerability of the Service Port component 7329 of the Tenda AC23 microprogramming router lies in insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS8.3AI score0.09712EPSS
SaveExploits1References4Affected Software1
RedhatCVE
RedhatCVE
•added 2024/04/17 7:54 p.m.•46 views

CVE-2024-26908

REJECTED CVE In the Linux kernel, the following vulnerability has been resolved: x86/xen: Add some null pointer checking to smp.c The Linux kernel CVE team has assigned CVE-2024-26908 to this issue...

5.5CVSS5.8AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2024/04/17 11:15 a.m.•45 views

CVE-2024-26908

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

5.8AI score
SaveExploits0References10
Rows per page
Query Builder