Lucene search
+L

1592 matches found

Positive Technologies
Positive Technologies
•added 2023/01/17 12:00 a.m.•4 views

PT-2023-34097

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A potential issue exists where a use-after-free error occurs in the ar5523 cmd function when it times out. The actual impact and likelihood of an attack have not been confirmed. Recommendatio...

5.9AI score
SaveExploits0References1
NVD
NVD
•added 2023/01/11 10:15 p.m.•30 views

CVE-2017-16315

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS9.5AI score0.00673EPSS
SaveExploits0References1
NVD
NVD
•added 2023/01/11 10:15 p.m.•34 views

CVE-2017-16314

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS9.5AI score0.00673EPSS
SaveExploits0References1
NVD
NVD
•added 2023/01/11 10:15 p.m.•38 views

CVE-2017-16302

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS9.5AI score0.00853EPSS
SaveExploits1References1
Prion
Prion
•added 2023/01/11 10:15 p.m.•30 views

Buffer overflow

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

6.5CVSS9.8AI score0.00853EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/01/11 10:15 p.m.•25 views

Buffer overflow

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

6.5CVSS9.8AI score0.00673EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/01/11 10:15 p.m.•35 views

Buffer overflow

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

6.5CVSS9.8AI score0.00853EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/01/11 10:15 p.m.•21 views

Buffer overflow

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

6.5CVSS9.8AI score0.00853EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/01/11 10:15 p.m.•33 views

Buffer overflow

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

6.5CVSS9.8AI score0.00853EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/01/11 10:15 p.m.•28 views

Buffer overflow

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

6.5CVSS9.8AI score0.00853EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/01/11 10:15 p.m.•28 views

Buffer overflow

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

6.5CVSS9.8AI score0.00853EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/01/11 10:15 p.m.•31 views

Buffer overflow

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

6.5CVSS9.8AI score0.00673EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/01/11 12:00 a.m.•5 views

PT-2023-10583

Name of the Vulnerable Software and Affected Versions Insteon Hub version 1012 Description Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub. Specially crafted commands sent through the PubNub service can cause a stack-bas...

9.9CVSS0.00673EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/11 12:00 a.m.•3 views

CVE-2017-16295: Stack-based Buffer Overflow

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS6.4AI score0.00853EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/01/01 12:00 a.m.•8 views

PT-2025-54166

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The amd pmc stb debugfs open v2 function may be called when the STB debug mechanism is enabled. If amd pmc send cmd fails, the buf is not released, leading to a memory leak...

5.5CVSS6.6AI score0.00172EPSS
SaveExploits0
Cvelist
Cvelist
•added 2022/12/30 10:30 a.m.•59 views

CVE-2022-43396 Apache Kylin: Command injection by Useless configuration

In the fix for CVE-2022-24697, a blacklist is used to filter user input commands. But there is a risk of being bypassed. The user can control the command by controlling the kylin.engine.spark-cmd parameter of conf...

9.5AI score0.55279EPSS
SaveExploits0References1
Mend
Mend
•added 2022/12/30 10:30 a.m.•8 views

CVE-2022-43396

In the fix for CVE-2022-24697, a blacklist is used to filter user input commands. But there is a risk of being bypassed. The user can control the command by controlling the kylin.engine.spark-cmd parameter of conf...

8.8CVSS0.55279EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/30 12:00 a.m.•4 views

CVE-2022-43396: Incomplete List of Disallowed Inputs

In the fix for CVE-2022-24697, a blacklist is used to filter user input commands. But there is a risk of being bypassed. The user can control the command by controlling the kylin.engine.spark-cmd parameter of conf...

8.8CVSS7.7AI score0.55279EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/12/30 12:00 a.m.•52 views

Apache Kylin 安全漏洞

Apache Kylin is an open source distributed analytic data warehouse from the Apache Foundation. The product mainly provides Hadoop/Spark on top of the SQL query interface and multidimensional analysis OLAP and other functions. kylin has a command injection vulnerability, the vulnerability stems fr...

8.8CVSS8.1AI score0.55279EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/12/13 12:00 a.m.•8 views

PT-2022-6832 · Ce805M · Ce805M

Name of the Vulnerable Software and Affected Versions: CE805M affected versions not specified Description: The issue is related to the incorrect management of code generation in the CMD W REG command handler of the CE A protocol implementation in the CE805M data collection and transmission device...

9CVSS7.2AI score
SaveExploits0References2
Rows per page
Query Builder