Lucene search
K

6242 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/12/14 12:0 a.m.17 views

Tencent WeChat WXAM Decoder Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM decoder. T...

8.8CVSS3.9AI score
Exploits0
NVD
NVD
added 2021/12/08 10:15 p.m.11 views

CVE-2021-23862

A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVMS with VRM installed, the VIDEOJET decoder VJD-7513 and VJD-8000...

9CVSS0.00528EPSS
Exploits0References1
Prion
Prion
added 2021/12/08 10:15 p.m.15 views

Design/Logic Flaw

A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVMS with VRM installed, the VIDEOJET decoder VJD-7513 and VJD-8000...

9CVSS7.2AI score0.00528EPSS
Exploits0References1Affected Software4
CVE
CVE
added 2021/12/08 9:17 p.m.42 views

CVE-2021-23862

CVE-2021-23862 describes an authenticated command-injection flaw: a crafted configuration packet sent by an authenticated administrative user can execute arbitrary commands in the system context. Affected products include Bosch VRM, DIVAR IP, BVMS with VRM installed, and the VIDEOJET decoder (VJD...

9CVSS7.2AI score0.00528EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2021/12/08 9:17 p.m.13 views

CVE-2021-23862 Authenticated Remote Code Execution

A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVMS with VRM installed, the VIDEOJET decoder VJD-7513 and VJD-8000...

7.2CVSS7.5AI score0.00528EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/12/08 12:0 a.m.2 views

PT-2021-15575 · Bosch · Vrm +3

Name of the Vulnerable Software and Affected Versions: BVMS with VRM installed versions affected versions not specified DIVAR IP versions affected versions not specified VIDEOJET decoder versions affected versions not specified VRM versions affected versions not specified Description: A crafted...

9CVSS7.4AI score0.00528EPSS
Exploits0References5
Zero Day Initiative
Zero Day Initiative
added 2021/12/07 12:0 a.m.12 views

Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

4.3CVSS1.7AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/07 12:0 a.m.20 views

Tencent WeChat WAXM Decoder Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM Decoder. T...

8.8CVSS2.7AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/07 12:0 a.m.15 views

Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

4.3CVSS1.7AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/07 12:0 a.m.13 views

Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

4.3CVSS1.7AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/07 12:0 a.m.16 views

Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

4.3CVSS1.7AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/07 12:0 a.m.12 views

Tencent WeChat WXAM Decoder Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM decoder. T...

8.8CVSS3.9AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/07 12:0 a.m.15 views

Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

4.3CVSS1.7AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/07 12:0 a.m.30 views

Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

4.3CVSS1.7AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/07 12:0 a.m.9 views

Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

3.3CVSS1.7AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/07 12:0 a.m.24 views

Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

3.3CVSS1.7AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/07 12:0 a.m.21 views

Tencent WeChat WXAM Decoder Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM decoder. T...

8.8CVSS2.6AI score
Exploits0
Positive Technologies
Positive Technologies
added 2021/12/02 12:0 a.m.3 views

PT-2021-7906 · Aom +4 · Aom +4

Name of the Vulnerable Software and Affected Versions: AOM version 2.0.1 Description: The issue is related to a NULL pointer dereference in the av1/av1 dx iface.c component of the AOM library, which implements the AV1 codec. This could allow a remote attacker to cause a denial of service. The...

9.8CVSS7.4AI score0.00247EPSS
Exploits5References76
CNVD
CNVD
added 2021/12/01 12:0 a.m.21 views

Zephyr has an unspecified vulnerability (CNVD-2021-95617)

Zephyr is an open source, small, scalable, real-time operating system. a security vulnerability exists in Zephyr, which stems from the ZephyrJSON decoder incorrectly decoding arrays. No details of the vulnerability are currently available...

7.5CVSS1.6AI score0.00334EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/12/01 12:0 a.m.2 views

PT-2021-6933 · Mediatek · Mediatek Mt8167 +48

Name of the Vulnerable Software and Affected Versions: alac decoder versions affected versions not specified MediaTek MT6570, MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779,...

5.5CVSS5.1AI score0.00023EPSS
Exploits0References15
Rows per page
Query Builder