Lucene search
K

3026 matches found

CNNVD
CNNVD
added 2025/12/30 12:0 a.m.3 views

SOUND4多款产品 安全漏洞

SOUND4 IMPACT and others are products of the French company SOUND4.SOUND4 IMPACT is a professional audio processor for broadcasting.SOUND4 FIRST is an audio processor for broadcasting.SOUND4 PULSE is an audio processor. A security vulnerability exists in several SOUND4 products, which stems from...

7.5CVSS6.5AI score0.00741EPSS
Exploits2References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.3 views

SOUND4多款产品 安全漏洞

SOUND4 IMPACT and others are products of the French company SOUND4.SOUND4 IMPACT is a professional audio processor for broadcasting.SOUND4 FIRST is an audio processor for broadcasting.SOUND4 PULSE is an audio processor. A security vulnerability exists in several SOUND4 products that originates fr...

8.7CVSS6.8AI score0.0074EPSS
Exploits2References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.3 views

SOUND4多款产品 信任管理问题漏洞

SOUND4 IMPACT and others are products of SOUND4, a French company.SOUND4 IMPACT is a professional broadcast audio processor.SOUND4 FIRST is an audio processor for broadcasting.SOUND4 PULSE is an audio processor. A trust management issue vulnerability exists in various SOUND4 products that stems...

9.8CVSS6.7AI score0.00512EPSS
Exploits2References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.0 views

SOUND4多款产品 路径遍历漏洞

SOUND4 IMPACT and others are products of SOUND4, a French company.SOUND4 IMPACT is a professional broadcast audio processor.SOUND4 FIRST is a broadcast audio processor.SOUND4 PULSE is an audio processor. A path traversal vulnerability exists in a number of SOUND4 products, which stems from the fi...

8.7CVSS6.8AI score0.01349EPSS
Exploits2References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.2 views

SOUND4多款产品 操作系统命令注入漏洞

SOUND4 IMPACT and others are products of the French company SOUND4.SOUND4 IMPACT is a professional broadcast audio processor.SOUND4 FIRST is a broadcast audio processor.SOUND4 PULSE is an audio processor. An operating system command injection vulnerability exists in various SOUND4 products that...

8.8CVSS7.5AI score0.02789EPSS
Exploits2References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.1 views

SOUND4多款产品 操作系统命令注入漏洞

SOUND4 IMPACT and others are products of the French company SOUND4.SOUND4 IMPACT is a professional audio processor for broadcasting.SOUND4 FIRST is an audio processor for broadcasting.SOUND4 PULSE is an audio processor. An operating system command injection vulnerability exists in several SOUND4...

8.5CVSS7.5AI score0.03713EPSS
Exploits2References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.1 views

SOUND4多款产品 操作系统命令注入漏洞

SOUND4 IMPACT and others are products of SOUND4, a French company.SOUND4 IMPACT is a professional broadcast audio processor.SOUND4 FIRST is a broadcast audio processor.SOUND4 PULSE is an audio processor. An operating system command injection vulnerability exists in several SOUND4 products that...

9.8CVSS7.5AI score0.03264EPSS
Exploits2References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.4 views

SOUND4多款产品 操作系统命令注入漏洞

SOUND4 IMPACT and others are products of the French company SOUND4.SOUND4 IMPACT is a professional broadcast audio processor.SOUND4 FIRST is a broadcast audio processor.SOUND4 PULSE is an audio processor. An operating system command injection vulnerability exists in several SOUND4 products. The...

8.5CVSS7.5AI score0.03353EPSS
Exploits2References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.2 views

SOUND4多款产品 路径遍历漏洞

SOUND4 IMPACT and others are products of SOUND4, a French company.SOUND4 IMPACT is a professional broadcast audio processor.SOUND4 FIRST is a broadcast audio processor.SOUND4 PULSE is an audio processor. A path traversal vulnerability exists in several SOUND4 products, which stems from a path...

9.8CVSS7.9AI score0.01442EPSS
Exploits2References5
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.4 views

PT-2025-54235

SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x contains an unauthenticated stored cross-site scripting vulnerability in the username parameter that allows attackers to inject malicious scripts. Attackers can exploit the unvalidated username input to execute arbitrary HTML and JavaScript code in victi...

7.2CVSS6.5AI score0.00393EPSS
Exploits2References7
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.3 views

SOUND4多款产品 操作系统命令注入漏洞

SOUND4 IMPACT and others are products of the French company SOUND4.SOUND4 IMPACT is a professional broadcast audio processor.SOUND4 FIRST is a broadcast audio processor.SOUND4 PULSE is an audio processor. An operating system command injection vulnerability exists in several SOUND4 products. The...

8.5CVSS7.5AI score0.03744EPSS
Exploits2References5
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.3 views

PT-2025-54240

Name of the Vulnerable Software and Affected Versions SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below Description The software contains an unauthenticated file disclosure issue that allows remote attackers to access sensitive system files. Attackers can exploit the issue by manipulating the...

9.8CVSS6.5AI score0.01349EPSS
Exploits2References8
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.3 views

PT-2025-54242

Name of the Vulnerable Software and Affected Versions SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below Description The software contains an unauthenticated command injection issue. An attacker can inject arbitrary shell commands through the HTTP POST username parameter in the index.php and...

9.8CVSS7.9AI score0.03264EPSS
Exploits2References8
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.3 views

PT-2025-54024

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc7-build3+ 701 Description A flaw exists in the Linux kernel's rxrpc subsystem related to call timeouts. Specifically, the issue occurs when a call is stalled while waiting for a connection, potentially...

6.2AI score0.00166EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.3 views

SOUND4多款产品 SQL注入漏洞

SOUND4 IMPACT and others are products of SOUND4 France.SOUND4 IMPACT is a professional audio processor for broadcasting.SOUND4 FIRST is an audio processor for broadcasting.SOUND4 PULSE is an audio processor. A SQL injection vulnerability exists in several SOUND4 products. The vulnerability stems...

9.8CVSS7.8AI score0.00815EPSS
Exploits2References5
OSV
OSV
added 2025/12/24 11:15 a.m.5 views

AZL-73066 CVE-2025-68345 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41hdareadacpi The acpigetfirstphysicalnode function can return NULL, in which case the getdevice function also returns NULL, but this value is then dereferenced without...

5.6AI score0.00206EPSS
Exploits0References1
OSV
OSV
added 2025/12/24 10:55 a.m.11 views

CVE-2023-54021 ext4: set goal start correctly in ext4_mb_normalize_request

In the Linux kernel, the following vulnerability has been resolved: ext4: set goal start correctly in ext4mbnormalizerequest We need to set acgex to notify the goal start used in ext4mbfindbygoal. Set acgex instead of acfex in ext4mbnormalizerequest. Besides we should assure goal start is in rang...

6.3AI score0.00165EPSS
Exploits0References11
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.3 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unchecked acpigetfirstphysicalnode return value that could result in a null pointer dereference...

6.1AI score0.00206EPSS
Exploits0References4
EUVD
EUVD
added 2025/12/23 12:30 a.m.3 views

EUVD-2023-60249

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated vulnerability in the /usr/cgi-bin/restorefactory.cgi endpoint that allows remote attackers to reset device configuration. Attackers can send a POST request to the endpoint with specific data to trigger a factory reset and bypass...

8.8CVSS6.5AI score0.00872EPSS
Exploits2References5
EUVD
EUVD
added 2025/12/23 12:30 a.m.4 views

EUVD-2023-60244

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access hidden system resources. Attackers can exploit the vulnerability by manipulating user-supplied input to execute privileged functionalities without...

9.8CVSS6.6AI score0.00758EPSS
Exploits2References5
Rows per page
Query Builder