Lucene search
K

4778 matches found

Cvelist
Cvelist
added 2022/03/07 1:50 p.m.21 views

CVE-2021-40054

There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability may affect integrity...

7.8AI score0.00597EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2022/03/05 12:0 a.m.41 views

FreeBSD : asterisk -- multiple vulnerabilities (964c5460-9c66-11ec-ad3a-001999f8d30b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 964c5460-9c66-11ec-ad3a-001999f8d30b advisory. - PJSIP is a free and open source multimedia communication library written in C language...

9.8CVSS8.6AI score0.0462EPSS
Exploits0References7
FreeBSD
FreeBSD
added 2022/03/03 12:0 a.m.51 views

asterisk -- multiple vulnerabilities

The Asterisk project reports: AST-2022-004 - The header length on incoming STUN messages that contain an ERROR-CODE attribute is not properly checked. This can result in an integer underflow. Note, this requires ICE or WebRTC support to be in use with a malicious remote party. AST-2022-005 - When...

0.1AI score
Exploits0References3
NVD
NVD
added 2022/02/24 7:15 p.m.15 views

CVE-2022-0544

An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an attacker to read sensitive data using a crafted DDS image file. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1...

5.5CVSS0.01135EPSS
Exploits0References3
OSV
OSV
added 2022/02/24 7:15 p.m.25 views

CVE-2022-0544

An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an attacker to read sensitive data using a crafted DDS image file. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1...

5.5CVSS6.3AI score
Exploits0References3
Prion
Prion
added 2022/02/24 7:15 p.m.267 views

Integer overflow

An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an attacker to read sensitive data using a crafted DDS image file. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1...

2.6CVSS5.3AI score0.01135EPSS
Exploits0References3Affected Software2
UbuntuCve
UbuntuCve
added 2022/02/24 7:15 p.m.32 views

CVE-2022-0544

An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an attacker to read sensitive data using a crafted DDS image file. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1...

5.5CVSS6AI score0.01135EPSS
Exploits0References4
OSV
OSV
added 2022/02/24 7:15 p.m.1 views

UBUNTU-CVE-2022-0544

An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an attacker to read sensitive data using a crafted DDS image file. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1...

5.5CVSS6AI score0.01135EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2022/02/24 6:27 p.m.55 views

CVE-2022-0544

An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an attacker to read sensitive data using a crafted DDS image file. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1...

5.5CVSS5.2AI score0.01135EPSS
Exploits0
Cvelist
Cvelist
added 2022/02/24 6:27 p.m.29 views

CVE-2022-0544

An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an attacker to read sensitive data using a crafted DDS image file. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1...

6.2AI score0.01135EPSS
Exploits0References3
CVE
CVE
added 2022/02/24 6:27 p.m.112 views

CVE-2022-0544

CVE-2022-0544 concerns Blender’s DDS loader, where an integer underflow can trigger an out-of-bounds read. The vulnerability affects Blender versions prior to 2.83.19, 2.93.8, and 3.1, as described in connected sources. The issue arises in how the DDS image is parsed, potentially allowing an atta...

5.5CVSS5.8AI score0.01135EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2022/02/18 8:15 p.m.13 views

CVE-2022-24046

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anacapd...

9.8CVSS0.03828EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/18 8:15 p.m.4 views

CVE-2022-24046

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anacapd...

9.8CVSS6.2AI score0.03828EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/02/18 7:51 p.m.16 views

CVE-2022-24046

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anacapd...

9.8CVSS9AI score0.03828EPSS
Exploits0References1
CVE
CVE
added 2022/02/18 7:51 p.m.100 views

CVE-2022-24046

Summary: CVE-2022-24046 affects Sonos One Speaker (S2 apps before 3.4.1; S1 apps before 11.2.13 build 57923290). The flaw is in the anacapd daemon and stems from improper validation of user-supplied data, causing an integer underflow and allowing code execution with root privileges. The vulnerabi...

9.8CVSS8.9AI score0.03828EPSS
Exploits0References1Affected Software2
GithubExploit
GithubExploit
added 2022/02/18 9:27 a.m.724 views

Exploit for Integer Overflow or Wraparound in Linux Linux_Kernel

CVE-2022-0185 linux kernel privileges escape toc Vuln...

8.4CVSS6.9AI score0.88106EPSS
Exploits109
Veracode
Veracode
added 2022/02/14 7:31 p.m.32 views

Denial Of Service (DoS)

xrdp is vulnerable to denial of service. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root...

7.8CVSS6.2AI score0.00467EPSS
Exploits0References7Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/02/14 12:0 a.m.45 views

(Pwn2Own) Sonos One Speaker Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anacapd daemon. The issue results from the lack of proper validation of...

8.8CVSS3.7AI score0.03828EPSS
Exploits0
CNNVD
CNNVD
added 2022/02/10 12:0 a.m.4 views

Sonos One Speaker 数字错误漏洞

Sonos One Speaker is a smart speaker from Sonos USA. The Sonos One Speaker suffers from a numeric error vulnerability that stems from a lack of proper validation of user-supplied data, which could result in an integer underflow before writing to memory. An attacker can exploit this vulnerability ...

9.8CVSS8.6AI score0.03828EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2022/02/09 12:0 a.m.40 views

AlmaLinux 8 : virt:rhel (ALSA-2019:3345)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2019:3345 advisory. ntfs-3g: heap-based buffer overflow leads to local root privilege escalation CVE-2019-9755 QEMU: slirp: information leakage in tcpemu due to uninitialized...

7.5CVSS6.9AI score0.05546EPSS
Exploits1References4
Rows per page
Query Builder