Lucene search
K

8 matches found

SUSE CVE
SUSE CVE
added 2026/04/23 1:23 a.m.1 views

SUSE CVE-2026-41457

OwnTone Server versions 28.4 through 29.0 contain a SQL injection vulnerability in DAAP query and filter handling that allows attackers to inject arbitrary SQL expressions by supplying malicious values through the query= and filter= parameters for integer-mapped DAAP fields. Attackers can exploit...

6.9CVSS5.9AI score0.00052EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/22 1:46 a.m.1 views

CVE-2026-41457

OwnTone Server versions 28.4 through 29.0 contain a SQL injection vulnerability in DAAP query and filter handling that allows attackers to inject arbitrary SQL expressions by supplying malicious values through the query= and filter= parameters for integer-mapped DAAP fields. Attackers can exploit...

6.9CVSS5.9AI score0.00052EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2020/06/18 1:8 p.m.20 views

CVE-2017-9106

An issue was discovered in adns before 1.5.2. adnsrrinfo mishandles a bogus datap. The general pattern for formatting integers is to sprintf into a fixed-size buffer. This is correct if the input is in the right range; if it isn't, the buffer may be overrun depending on the sizes of the types on...

7.5CVSS8.6AI score0.00563EPSS
Exploits0
Cvelist
Cvelist
added 2012/08/16 10:0 a.m.16 views

CVE-2012-4293

plugins/ethercat/packet-ecatmb.c in the EtherCAT Mailbox dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly handle certain integer fields, which allows remote attackers to cause a denial of service application exit via a malformed packet...

6.2AI score0.00995EPSS
Exploits0References13
Tenable Nessus
Tenable Nessus
added 2012/02/23 12:0 a.m.19 views

IBM Solid Database 6.5 < 6.5.0.8 Multiple Denial of Service Vulnerabilities

Binary data 6340.prm...

5CVSS6.8AI score0.18912EPSS
Exploits3References4
Cvelist
Cvelist
added 2010/10/22 10:0 p.m.15 views

CVE-2010-4057

solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing many integer fields with two different values, which allows remote attackers to cause a denial of service invalid memory access and daemon crash via ...

6.3AI score0.18912EPSS
Exploits1References6
Cvelist
Cvelist
added 2010/10/22 10:0 p.m.18 views

CVE-2010-4055

Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denial of service memory consumption and daemon crash by connecting to TCP port 1315 and sending a packet with many integer fields, which trigger many recursive calls of a certain...

6.3AI score0.18912EPSS
Exploits1References6
CVE
CVE
added 2010/10/22 10:0 p.m.49 views

CVE-2010-4055

IBM solidDB vulnerability CVE-2010-4055 affects solidDB 6.5.0.3 and earlier. The issue arises from processing a TCP packet sent to port 1315 that contains many integer fields, which triggers many recursive calls and leads to excessive stack/memory consumption and a daemon crash (DoS). Connected N...

5CVSS6.5AI score0.18912EPSS
Exploits1References6Affected Software1
Rows per page
Query Builder