Lucene search
+L

1075 matches found

Veracode
Veracode
•added 2022/05/14 8:06 p.m.•36 views

Buffer Overflow

PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stack-buffer overflow vulnerability which only impacts PJSIP users who accept hashed digest credentials credentials with datatype PJSIPCREDDATADIGEST...

9.8CVSS9.1AI score0.0208EPSS
SaveExploits0References6Affected Software2
attackerkb
attackerkb
•added 2022/04/16 12:15 a.m.•8 views

CVE-2022-29287

Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights default is Administrator to export the user options of any user, even ones with higher privileges like Global Administrators than the current user. The exported XML...

4.9CVSS5.9AI score0.00897EPSS
SaveExploits1References3
OSV
OSV
•added 2022/04/16 12:15 a.m.•22 views

CVE-2022-29287

Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights default is Administrator to export the user options of any user, even ones with higher privileges like Global Administrators than the current user. The exported XML...

4.9CVSS5.8AI score0.00897EPSS
SaveExploits1References2
Prion
Prion
•added 2022/04/16 12:15 a.m.•28 views

Design/Logic Flaw

Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights default is Administrator to export the user options of any user, even ones with higher privileges like Global Administrators than the current user. The exported XML...

4CVSS5.1AI score0.00897EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
•added 2022/04/16 12:00 a.m.•59 views

Kentico CMS has an unspecified vulnerability

Kentico is the United States Kentico company's set of ASP.NET-based content management system CMS. A security vulnerability exists in Kentico CMS before 13.0.66, which can be exploited by an attacker with user administrative privileges administrator by default to export any user's user options,...

4.9CVSS6.8AI score0.00897EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/04/16 12:00 a.m.•15 views

Kentico 安全漏洞

Kentico is the United States Kentico company's set of ASP.NET-based content management system CMS. A security vulnerability exists in Kentico CMS before 13.0.66, which can be exploited by an attacker with user administrative privileges administrator by default to export any user's user options,...

4.9CVSS5.7AI score0.00897EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/04/15 12:00 a.m.•3 views

PT-2022-19523

Name of the Vulnerable Software and Affected Versions Kentico CMS versions prior to 13.0.66 Description The issue allows an attacker with user management rights, such as an Administrator, to export the user options of any user, including those with higher privileges like Global Administrators. Th...

4.9CVSS5.8AI score0.00897EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/15 12:00 a.m.•8 views

CVE-2022-29287: Authorization Bypass Through User-Controlled Key

Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights default is Administrator to export the user options of any user, even ones with higher privileges like Global Administrators than the current user. The exported XML...

4.9CVSS5.7AI score0.00897EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•18 views

PT-2022-3549 · Aethon · Aethon Tug Home Base Server

Name of the Vulnerable Software and Affected Versions: Aethon TUG Home Base Server versions prior to version 24 Description: The issue is related to weaknesses in the authorization procedure of the server. It allows a remote attacker to gain unauthorized access to hashed user credentials...

8.5CVSS7.5AI score0.00715EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•26 views

PT-2022-3560 · Aethon · Tug Home Base Server

Name of the Vulnerable Software and Affected Versions: Aethon TUG Home Base Server versions prior to version 24 Description: The issue is related to the lack of input data sanitization in the "Reports" component of the TUG Home Base Server, which can allow a remote attacker to conduct a cross-sit...

9CVSS5.4AI score0.00583EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/04/12 12:00 a.m.•19 views

Aethon TUG Home Base Server 安全漏洞

Aethon TUG Home Base Server is a robotics server from Aethon, Inc. It is used to control and communicate with autonomous mobile robots. Aethon TUG Home Base Server suffers from a security vulnerability that originates from an unauthenticated attacker having free access to hashed user credentials...

8.2CVSS7.6AI score0.00715EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•18 views

PT-2022-3655 · Aethon · Aethon Tug Home Base Server

Name of the Vulnerable Software and Affected Versions: Aethon TUG Home Base Server versions prior to version 24 Description: The issue is related to access to a channel from a non-terminal point, potentially allowing a remote attacker to perform a "man-in-the-middle" attack. An unauthenticated...

10CVSS8AI score0.0067EPSS
SaveExploits0References7
OSV
OSV
•added 2022/03/11 8:15 p.m.•12 views

DEBIAN-CVE-2022-24754

PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stack-buffer overflow vulnerability which only impacts PJSIP users who accept hashed digest credentials credentials with datatype PJSIPCREDDATADIGEST...

9.8CVSS7AI score0.0208EPSS
SaveExploits0References1
OSV
OSV
•added 2022/03/11 8:15 p.m.•12 views

ALPINE-CVE-2022-24754

PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stack-buffer overflow vulnerability which only impacts PJSIP users who accept hashed digest credentials credentials with datatype PJSIPCREDDATADIGEST...

9.8CVSS7AI score0.0208EPSS
SaveExploits0References1
Prion
Prion
•added 2022/03/11 8:15 p.m.•34 views

Stack overflow

PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stack-buffer overflow vulnerability which only impacts PJSIP users who accept hashed digest credentials credentials with datatype PJSIPCREDDATADIGEST...

7.5CVSS9.3AI score0.0208EPSS
SaveExploits0References5Affected Software2
OSV
OSV
•added 2022/03/11 8:15 p.m.•12 views

UBUNTU-CVE-2022-24754

PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stack-buffer overflow vulnerability which only impacts PJSIP users who accept hashed digest credentials credentials with datatype PJSIPCREDDATADIGEST...

9.8CVSS7.2AI score0.0208EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2022/03/11 8:15 p.m.•46 views

CVE-2022-24754

PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stack-buffer overflow vulnerability which only impacts PJSIP users who accept hashed digest credentials credentials with datatype PJSIPCREDDATADIGEST...

9.8CVSS7.1AI score0.0208EPSS
SaveExploits0References4
OSV
OSV
•added 2022/03/11 12:00 a.m.•41 views

CVE-2022-24754 Buffer overflow in pjsip

PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stack-buffer overflow vulnerability which only impacts PJSIP users who accept hashed digest credentials credentials with datatype PJSIPCREDDATADIGEST...

8.5CVSS9.2AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2022/03/11 12:00 a.m.•10 views

CVE-2022-24754 Buffer overflow in pjsip

PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stack-buffer overflow vulnerability which only impacts PJSIP users who accept hashed digest credentials credentials with datatype PJSIPCREDDATADIGEST...

8.5CVSS9.5AI score0.0208EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2022/03/11 12:00 a.m.•58 views

CVE-2022-24754 Buffer overflow in pjsip

PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stack-buffer overflow vulnerability which only impacts PJSIP users who accept hashed digest credentials credentials with datatype PJSIPCREDDATADIGEST...

8.5CVSS9.7AI score0.0208EPSS
SaveExploits0References5
Rows per page
Query Builder