Lucene search
+L

3376 matches found

Tenable Nessus
Tenable Nessus
added 2022/10/10 12:00 a.m.27 views

EulerOS Virtualization 3.0.6.0 : libsndfile (EulerOS-SA-2022-2570)

According to the versions of the libsndfile packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially...

7.1CVSS6.8AI score0.01754EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2022/10/09 12:00 a.m.32 views

EulerOS Virtualization 3.0.6.6 : libsndfile (EulerOS-SA-2022-2513)

According to the versions of the libsndfile package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially...

7.1CVSS6.8AI score0.01754EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2022/10/06 12:26 p.m.11 views

netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way

A flaw was found in the Netty's netty-codec due to unrestricted chunk lengths in the SnappyFrameDecoder. By sending a specially-crafted input, a remote attacker could cause excessive memory usage resulting in a denial of service...

7.5CVSS7.3AI score0.06745EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/10/06 12:26 p.m.96 views

Important: Red Hat Security Advisory: Service Registry (container images) release and security update [2.3.0.GA]

An update to the images for Red Hat Integration Service Registry is now available from the Red Hat Container Catalog. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact o...

10CVSS7.2AI score0.1223EPSS
SaveExploits10References19
RedHat Linux
RedHat Linux
added 2022/10/04 4:02 p.m.11 views

netty: control chars in header names may lead to HTTP request smuggling

A flaw was found in Netty, specifically in the netty-codec-http package. This flaw allows unauthorized control characters at the beginning and end of a request, does not follow the specification, and can cause HTTP request smuggling...

6.5CVSS6.8AI score0.02682EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2022/09/30 12:00 a.m.29 views

Debian dla-3126 : libsndfile1 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3126 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3126-1 [email protected] https://www.debian.org/lts/security/...

7.1CVSS6.9AI score0.01754EPSS
SaveExploits1References4
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/28 7:55 a.m.37 views

Security Bulletin: Enterprise Content Management System Monitor is affected by a vulnerability CVE-2021-37136 in Netty netty-codec

Summary Vulnerability found in Netty netty-codec component used by Enterprise Content Management System Monitor. Enterprise Content Management System Monitor has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2021-37136 DESCRIPTION: Netty netty-codec is vulnerable to a denial of...

7.5CVSS8AI score0.05908EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2022/09/16 12:00 a.m.5 views

PT-2022-33486 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.5 through v5.19.1 Description: A refcount leak was discovered in the cros ec codec platform probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/09/16 12:00 a.m.11 views

PT-2022-33331 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to a page fault in the snd hda codec shutdown function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

7.1AI score
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2022/08/16 7:40 p.m.85 views

Security Bulletin: IBM InfoSphere Identity Insight vulnerabilities in third party libraries (CVE-2021-39239, CVE-2022-23308, CVE-2021-29424, CVE-2020-15250, 177835)

Summary A vulnerability in the libxml2 library can cause a denial of service in IBM InfoSphere Identity Insight. Other vulnerabilities that do not impact Identity Insight are present in four libraries that are currently included with the product but not used. Vulnerability Details...

7.5CVSS7.7AI score0.10233EPSS
SaveExploits3Affected Software1
RedHat Linux
RedHat Linux
added 2022/08/04 4:46 a.m.10 views

netty: control chars in header names may lead to HTTP request smuggling

A flaw was found in Netty, specifically in the netty-codec-http package. This flaw allows unauthorized control characters at the beginning and end of a request, does not follow the specification, and can cause HTTP request smuggling...

6.5CVSS6.8AI score0.02682EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2022/08/03 4:10 p.m.88 views

Security Bulletin: IBM Security Identity Manager virtual appliance is vulnerable to arbitrary code execution due to Apache Log4j and issues in other open source components (CVE-2021-4104)

Summary IBM Security Identity Manager virtual appliance is vulnerable to arbitrary code execution due to Apache Log4j CVE-2021-4104. Apache Log4j is used by IBM Security Identity Manager virtual appliance as part of its logging infrastructure. This fix upgrades to Apache Log4j v2.17.1, as well as...

7.5CVSS9.2AI score0.81147EPSS
SaveExploits9Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/08/01 2:15 p.m.6 views

CVE-2022-26428

In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521260; Issue ID: ALPS06521260...

6.4CVSS6.1AI score0.00074EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/01 2:15 p.m.6 views

CVE-2022-26428

In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521260; Issue ID: ALPS06521260...

6.4CVSS6.7AI score0.00074EPSS
SaveExploits0References1
NVD
NVD
added 2022/08/01 2:15 p.m.23 views

CVE-2022-26428

In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521260; Issue ID: ALPS06521260...

6.4CVSS0.00074EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/01 2:15 p.m.21 views

Race condition

In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521260; Issue ID: ALPS06521260...

3.4CVSS6.7AI score0.00074EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/08/01 1:56 p.m.51 views

CVE-2022-26428

CVE-2022-26428 describes a race condition in the MediaTek video codec that can cause memory corruption and local privilege escalation. The vulnerability is triggered without user interaction and requires local access with high privileges; the base CVSSv3.1 vector indicates Local attack, High atta...

6.4CVSS6.7AI score0.00074EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/01 1:56 p.m.30 views

CVE-2022-26428

In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521260; Issue ID: ALPS06521260...

6.9AI score0.00074EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/08/01 12:00 a.m.12 views

PT-2022-17836 · Unknown · Video Codec

Name of the Vulnerable Software and Affected Versions: Video codec affected versions not specified Description: The issue is related to a possible memory corruption due to a race condition in the video codec. This could lead to local escalation of privilege, with System execution privileges neede...

6.4CVSS6.4AI score0.00074EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/08/01 12:00 a.m.9 views

MediaTek video codec 竞争条件问题漏洞

MediaTek video codec is a video codec from MediaTek, a Chinese company. The MediaTek video codec is vulnerable to a race condition issue, which stems from a race condition that could lead to memory corruption. This could result in a local privilege escalation that requires system execution...

6.4CVSS6.7AI score0.00074EPSS
SaveExploits0References2
Rows per page
Query Builder