Lucene search
+L

7569 matches found

Mend
Mend
•added 2021/11/12 9:53 p.m.•3 views

CVE-2021-43611

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...

8.7CVSS0.01216EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/12 12:00 a.m.•4 views

CVE-2021-43610: Inconsistent Interpretation of HTTP Requests

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via an invalid From header request URI without a parameter in an unauthenticated SIP message, a different issue than CVE-2021-33056...

7.5CVSS5.8AI score0.01191EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/11/12 12:00 a.m.•4 views

PT-2021-23890

Name of the Vulnerable Software and Affected Versions: Belledonne Belle-sip versions prior to 5.0.20 Description: The issue allows applications such as Linphone to crash when a specific character, , is present in the display name of a From header. Recommendations: For versions prior to 5.0.20,...

7.5CVSS0.01216EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/12 12:00 a.m.•8 views

CVE-2021-43611: Improper Resource Shutdown or Release

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...

7.5CVSS5.8AI score0.01216EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/11/12 12:00 a.m.•15 views

Belledonne Belle-sip 安全漏洞

Belledonne Belle-sip is a library from the French company Belledonne that implements the transport, transaction and dialog layers of SIP RFC 3261. A security vulnerability exists in Belledonne Belle sip versions prior to 5.0.20, which can be exploited by an attacker to crash an application such a...

7.5CVSS7.3AI score0.01216EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/11/12 12:00 a.m.•7 views

PT-2021-23889

Name of the Vulnerable Software and Affected Versions: Belle-sip versions prior to 5.0.20 Description: The issue can cause applications such as Linphone to crash when receiving an unauthenticated SIP message with an invalid From header, specifically a request URI without a parameter...

7.5CVSS0.01191EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/11/12 12:00 a.m.•23 views

Belledonne Belle-sip 环境问题漏洞

Belledonne Belle-sip is a library from the French company Belledonne that implements the transport, transaction and conversation layers of SIP RFC 3261. security vulnerabilities exist in versions prior to Belledonne Belle sip 5.0.20, which can be exploited by attackers to crash applications such ...

7.5CVSS5.6AI score0.01191EPSS
SaveExploits0References3
Prion
Prion
•added 2021/11/10 10:15 p.m.•29 views

Buffer overflow

A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tga file. Related to Data from Faulting Address controls Code Flow starting at Editor!TMethodImplementationIntercept+0x57a3b...

4.3CVSS5.6AI score0.00711EPSS
SaveExploits1References2Affected Software1
Openbugbounty
Openbugbounty
•added 2021/11/09 5:22 p.m.•24 views

news.abidjan.net Cross Site Scripting vulnerability OBB-2253330

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
attackerkb
attackerkb
•added 2021/11/05 9:15 p.m.•15 views

CVE-2021-41224

TensorFlow is an open source platform for machine learning. In affected versions the implementation of SparseFillEmptyRows can be made to trigger a heap OOB access. This occurs whenever the size of indices does not match the size of values. The fix will be included in TensorFlow 2.7.0. We will al...

7.1CVSS7AI score0.00208EPSS
SaveExploits1References3Affected Software1
Openbugbounty
Openbugbounty
•added 2021/11/05 8:50 p.m.•17 views

americadourada.ba.gov.br Cross Site Scripting vulnerability OBB-2239270

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
attackerkb
attackerkb
•added 2021/11/05 4:15 p.m.•18 views

CVE-2021-39413

Multiple Cross Site Scripting XSS vulnerabilities exits in SEO Panel v4.8.0 via the 1 totime parameter in a backlinks.php, b analytics.php, c log.php, d overview.php, e pagespeed.php, f rank.php, g review.php, h saturationchecker.php, i socialmedia.php, and j reports.php; the 2 fromtime parameter...

6.1CVSS6.4AI score0.00837EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/11/05 12:00 a.m.•23 views

PT-2021-22582 · Seo Panel · Seo Panel

Name of the Vulnerable Software and Affected Versions: SEO Panel version 4.8.0 Description: Multiple Cross Site Scripting XSS vulnerabilities exist in SEO Panel via several parameters in various PHP files. The affected parameters include to time in files such as backlinks.php, analytics.php, and...

6.1CVSS6.2AI score0.00837EPSS
SaveExploits1References6
Akamai Blog
Akamai Blog
•added 2021/11/03 1:00 p.m.•24 views

Akamai + Guardicore: End-to-End Zero Trust

Ransomware attacks increased by over 150% in 2020. As criminals find new ways to attack networks and systems, protect work-from-home employees with Akamai...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/11/03 12:00 a.m.•3 views

PT-2021-27884

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Global-buffer-overflow READ 2. The crash state involves several functions: fr unix time from tm, fr unix...

5.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/10/29 12:00 a.m.•4 views

PT-2021-30950

Уязвимость функции extract dirs from files подсистемы безопасности PARSEC связана с доступом к неинициализированному указателю. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальным данным...

4.7CVSS5.8AI score
SaveExploits0References3
OSV
OSV
•added 2021/10/21 5:15 p.m.•4 views

DEBIAN-CVE-2021-42327

dplinksettingswrite in drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parsewritebufferintoparam...

6.7CVSS6.9AI score0.00874EPSS
SaveExploits1References1
OSV
OSV
•added 2021/10/21 5:15 p.m.•27 views

AZL-6600 CVE-2021-42327 affecting package kernel for versions less than 5.10.78.1-1

dplinksettingswrite in drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parsewritebufferintoparam...

6.7CVSS6.9AI score0.00874EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/10/21 5:15 p.m.•14 views

CVE-2021-42327

dplinksettingswrite in drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parsewritebufferintoparam...

6.7CVSS6.9AI score0.00874EPSS
SaveExploits1References8
Fedora
Fedora
•added 2021/10/21 4:53 p.m.•105 views

[SECURITY] Fedora 34 Update: vsftpd-3.0.3-43.fc34

vsftpd is a Very Secure FTP daemon. It was written completely from scratch...

7.4CVSS7.4AI score0.02027EPSS
SaveExploits0
Rows per page
Query Builder