Lucene search
+L

333 matches found

Positive Technologies
Positive Technologies
•added 2023/12/15 12:00 a.m.•15 views

PT-2023-32787 · Wso2 · Wso2

Name of the Vulnerable Software and Affected Versions: WSO2 affected versions not specified Description: The issue is related to improper error handling in a REST API resource, which could expose a server-side error containing an internal WSO2 specific package name in the HTTP response...

5.3CVSS5AI score0.00525EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/15 12:00 a.m.•1 views

CVE-2023-6839: Generation of Error Message Containing Sensitive Information

Due to improper error handling, a REST API resource could expose a server side error containing an internal WSO2 specific package name in the HTTP response...

5.3CVSS6AI score0.00525EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/12/11 12:00 a.m.•20 views

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

7.8CVSS7.2AI score0.01369EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/12/11 12:00 a.m.•15 views

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

7.8CVSS7.2AI score0.01355EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/12/11 12:00 a.m.•13 views

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

7.8CVSS7.2AI score0.01355EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/12/11 12:00 a.m.•14 views

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

7.8CVSS7.2AI score0.01369EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/12/11 12:00 a.m.•17 views

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

7.8CVSS7.2AI score0.01355EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/12/11 12:00 a.m.•16 views

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

7.8CVSS7.2AI score0.01369EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/12/04 3:45 a.m.•49 views

CVE-2023-32841

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01128524; Issue ID:...

7.6AI score0.01369EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/04 12:00 a.m.•2 views

CVE-2023-32846: Reachable Assertion

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01128524; Issue ID:...

7.5CVSS7.3AI score0.01355EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/04 12:00 a.m.•2 views

CVE-2023-32845: Reachable Assertion

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01128524; Issue ID:...

7.5CVSS7.3AI score0.01369EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/04 12:00 a.m.•1 views

CVE-2023-32841: Reachable Assertion

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01128524; Issue ID:...

7.5CVSS7.3AI score0.01369EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/04 12:00 a.m.•1 views

CVE-2023-32842: Reachable Assertion

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01130256; Issue ID:...

7.5CVSS7.3AI score0.01355EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/04 12:00 a.m.•3 views

CVE-2023-32843: Reachable Assertion

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01130204; Issue ID:...

7.5CVSS7.3AI score0.01369EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/12/03 12:00 a.m.•17 views

PT-2023-7539 · 5G Modem · 5G Modem

Name of the Vulnerable Software and Affected Versions: 5G Modem affected versions not specified Description: The issue is related to improper error handling in the 5G Modem, which could lead to a system crash and remote denial of service when receiving malformed RRC messages. No additional...

7.8CVSS7.3AI score0.01369EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2023/11/01 12:00 a.m.•9 views

PT-2023-17420 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the remote access SSL VPN feature could allow an...

5CVSS4.9AI score0.00292EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/01 12:00 a.m.•4 views

CVE-2023-20247: Authentication Bypass Using an Alternate Path or Channel

A vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to bypass a configured multiple certificate authentication policy and connect using only a valid...

5CVSS5.7AI score0.00292EPSS
SaveExploits0References4
Veracode
Veracode
•added 2023/09/20 10:46 a.m.•51 views

Denial Of Service

grpc is vulnerable to Denial Of Service. The vulnerability is due to improper error handling in TCP server which allows an attacker to initiate number of concurrent connections with the server leading to denial of service...

7.5CVSS7.3AI score0.00773EPSS
SaveExploits0References6Affected Software2
OSV
OSV
•added 2023/08/31 2:15 p.m.•17 views

CVE-2023-41640

An improper error handling vulnerability in the component ErroreNonGestito.aspx of GruppoSCAI RealGimm 1.1.37p38 allows attackers to obtain sensitive technical information via a crafted SQL query...

8.8CVSS5.8AI score0.01036EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/08/31 2:15 p.m.•10 views

CVE-2023-41640

An improper error handling vulnerability in the component ErroreNonGestito.aspx of GruppoSCAI RealGimm 1.1.37p38 allows attackers to obtain sensitive technical information via a crafted SQL query...

8.8CVSS5.8AI score0.01036EPSS
SaveExploits1References3
Rows per page
Query Builder