Lucene search
+L

7743 matches found

attackerkb
attackerkb
•added 2022/02/18 8:15 p.m.•14 views

CVE-2022-24046

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anacapd...

9.8CVSS6.2AI score0.04085EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/02/18 7:51 p.m.•46 views

CVE-2022-24046

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anacapd...

9.8CVSS9AI score0.04085EPSS
SaveExploits0References1
CVE
CVE
•added 2022/02/18 7:51 p.m.•152 views

CVE-2022-24046

Summary: CVE-2022-24046 affects Sonos One Speaker (S2 apps before 3.4.1; S1 apps before 11.2.13 build 57923290). The flaw is in the anacapd daemon and stems from improper validation of user-supplied data, causing an integer underflow and allowing code execution with root privileges. The vulnerabi...

9.8CVSS8.9AI score0.04085EPSS
SaveExploits0References1Affected Software2
GithubExploit
GithubExploit
•added 2022/02/18 9:27 a.m.•988 views

Exploit for Integer Overflow or Wraparound in Linux Linux_Kernel

CVE-2022-0185 linux kernel privileges escape toc Vuln...

8.4CVSS7.2AI score0.92795EPSS
SaveExploits113
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/18 12:00 a.m.•7 views

CVE-2022-24046: Integer Underflow (Wrap or Wraparound)

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anacapd...

9.8CVSS8.6AI score0.04085EPSS
SaveExploits0References3
Veracode
Veracode
•added 2022/02/14 7:31 p.m.•45 views

Denial Of Service (DoS)

xrdp is vulnerable to denial of service. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root...

7.8CVSS6.2AI score0.00489EPSS
SaveExploits0References7Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/14 12:00 a.m.•57 views

(Pwn2Own) Sonos One Speaker Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anacapd daemon. The issue results from the lack of proper validation of...

8.8CVSS3.7AI score0.04085EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/02/14 12:00 a.m.•9 views

PT-2022-16431

Name of the Vulnerable Software and Affected Versions Sonos One Speaker versions prior to 3.4.1 S2 systems Sonos One Speaker versions prior to 11.2.13 build 57923290 S1 systems Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations...

9.8CVSS0.04085EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/02/10 12:00 a.m.•23 views

Sonos One Speaker has a digital error vulnerability

Sonos One Speaker is a smart speaker from Sonos USA. The Sonos One Speaker suffers from a numeric error vulnerability that stems from a lack of proper validation of user-supplied data, which could result in an integer underflow before writing to memory. An attacker can exploit this vulnerability ...

9.8CVSS8.6AI score0.04085EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/09 12:00 a.m.•8 views

CVE-2022-22715: Integer Underflow (Wrap or Wraparound)

Named Pipe File System Elevation of Privilege Vulnerability...

7.8CVSS7.3AI score0.13505EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/02/09 12:00 a.m.•4 views

PT-2024-10534

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an integer underflow in the NFSD component of the Linux kernel. This underflow occurs because the ia size variable, which is a signed 64-bit type, can be assigned...

9.1CVSS0.00631EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2022/02/09 12:00 a.m.•52 views

AlmaLinux 8 : virt:rhel (ALSA-2019:3345)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2019:3345 advisory. ntfs-3g: heap-based buffer overflow leads to local root privilege escalation CVE-2019-9755 QEMU: slirp: information leakage in tcpemu due to uninitialized...

7.5CVSS6.9AI score0.05546EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2022/02/08 12:00 a.m.•53 views

FreeBSD : xrdp -- privilege escalation (fc2a9541-8893-11ec-9d01-80ee73419af3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fc2a9541-8893-11ec-9d01-80ee73419af3 advisory. - xrdp is an open source remote desktop protocol RDP server. In affected versions an integer underflow...

7.8CVSS7.5AI score0.00489EPSS
SaveExploits0References3
NVD
NVD
•added 2022/02/07 10:15 p.m.•33 views

CVE-2022-23613

xrdp is an open source remote desktop protocol RDP server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in...

7.8CVSS0.00489EPSS
SaveExploits0References4
Prion
Prion
•added 2022/02/07 10:15 p.m.•31 views

Integer overflow

xrdp is an open source remote desktop protocol RDP server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in...

7.2CVSS8AI score0.00489EPSS
SaveExploits0References4Affected Software2
CVE
CVE
•added 2022/02/07 9:40 p.m.•220 views

CVE-2022-23613

CVE-2022-23613 affects xrdp, an open-source RDP server. Affected versions have an integer underflow causing a heap overflow in the sesman server, enabling an unauthenticated attacker with local sesman access to execute code as root. The issue is patched in xrdp version 0.9.18.1 and above; upgradi...

7.8CVSS8AI score0.00489EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2022/02/07 9:40 p.m.•90 views

CVE-2022-23613 Privilege escalation on xrdp

xrdp is an open source remote desktop protocol RDP server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in...

7.8CVSS8.3AI score0.00489EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2022/02/07 9:40 p.m.•39 views

CVE-2022-23613 Privilege escalation on xrdp

xrdp is an open source remote desktop protocol RDP server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in...

7.8CVSS7.9AI score
SaveExploits0References6
Mend
Mend
•added 2022/02/07 9:40 p.m.•6 views

CVE-2022-23613

xrdp is an open source remote desktop protocol RDP server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in...

8.5CVSS0.00489EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2022/02/07 12:00 a.m.•5 views

PT-2022-4799

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.18.1 Description The issue is related to an integer underflow leading to a heap overflow in the sesman server, allowing any unauthenticated attacker with local access to the sesman server to execute code as root. Thi...

7.8CVSS0.00489EPSS
SaveExploits0References36
Rows per page
Query Builder