Lucene search
+L

1833 matches found

OSV
OSV
added 2022/12/14 9:15 p.m.32 views

CVE-2022-46344

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X...

8.8CVSS8.6AI score
SaveExploits0References8
OSV
OSV
added 2022/12/14 9:15 p.m.5 views

AZL-44550 CVE-2022-46344 affecting package xorg-x11-server 1.20.10-6

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X...

8.8CVSS7.5AI score0.02685EPSS
SaveExploits0References1
NVD
NVD
added 2022/12/14 9:15 p.m.23 views

CVE-2022-46344

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X...

8.8CVSS0.02685EPSS
SaveExploits0References8
Prion
Prion
added 2022/12/14 9:15 p.m.24 views

Out-of-bounds

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X...

6.5CVSS8.4AI score0.02685EPSS
SaveExploits0References8Affected Software3
RedhatCVE
RedhatCVE
added 2022/12/14 5:5 a.m.26 views

CVE-2022-46344

A vulnerability was found in X.Org. The issue occurs because the handler for the XIChangeProperty request has a length-validation issue, resulting in out-of-bounds memory reads and potential information disclosure. This flaw can lead to local privilege elevation on systems where the X server runs...

8.8CVSS8.4AI score0.02685EPSS
SaveExploits0References3
CVE
CVE
added 2022/12/14 12:0 a.m.204 views

CVE-2022-46344

CVE-2022-46344 affects X.Org X11-server (XIChangeProperty). The description in the CVE entry notes an out-of-bounds memory access in the XIChangeProperty handler, enabling potential local privilege elevation on privileged X servers and remote code execution for ssh X forwarding sessions. Connecte...

8.8CVSS8.7AI score0.02685EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2022/12/14 12:0 a.m.6 views

UBUNTU-CVE-2022-46344

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X...

8.8CVSS7.4AI score0.02685EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2022/12/14 12:0 a.m.31 views

CVE-2022-46344

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X...

8.8CVSS8.4AI score0.02685EPSS
SaveExploits0
NVD
NVD
added 2022/12/12 9:15 a.m.25 views

CVE-2022-20690

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device. These vulnerabilities are due to missing...

8.8CVSS0.00727EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/12 9:15 a.m.9 views

CVE-2022-20690

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device. These vulnerabilities are due to missing...

8.8CVSS5.8AI score0.00727EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/12/07 4:56 p.m.38 views

CVE-2022-20690

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device. These vulnerabilities are due to missing...

5.3CVSS8.9AI score0.00727EPSS
SaveExploits0References1
CVE
CVE
added 2022/12/07 4:56 p.m.233 views

CVE-2022-20690

Cisco ATA 190 Series Analog Telephone Adapter firmware contains multiple vulnerabilities in the Cisco Discovery Protocol (CDP) processing due to missing length validation when handling CDP messages. An unauthenticated, adjacent attacker can send a crafted CDP packet, potentially causing memory co...

8.8CVSS8.8AI score0.00727EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/07 4:54 p.m.18 views

CVE-2022-20689

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device. These vulnerabilities are due to missing...

5.3CVSS7.2AI score0.00642EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/12/07 4:54 p.m.39 views

CVE-2022-20688

A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause Cisco Discovery Protocol service to restart. This vulnerability is due ...

5.3CVSS6.3AI score0.00935EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/12/07 4:53 p.m.40 views

CVE-2022-20687

Multiple vulnerabilities in the Link Layer Discovery Protocol LLDP functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart. These vulnerabilities a...

5.3CVSS6.4AI score0.00927EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/12/06 12:0 a.m.23 views

Tenda i22 formWx3AuthorizeSet function buffer overflow vulnerability

Tenda i22 is a wireless access point from Tenda, China. version 1.0.0.3 4687 of the Tenda i22 is vulnerable to a buffer overflow vulnerability that stems from a lack of length validation of input data in the data parameter of the formWx3AuthorizeSet function. An attacker could exploit this...

7.5CVSS5.9AI score0.09141EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/12/06 12:0 a.m.30 views

Tenda i22 formSetAppFilterRule function buffer overflow vulnerability

Tenda i22 is a wireless access point from Tenda, China. Tenda i22 is vulnerable to a buffer overflow vulnerability, which stems from a lack of length validation of input data in the appData parameter of the formSetAppFilterRule function. An attacker could exploit this vulnerability to cause a...

7.5CVSS4AI score0.00815EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/12/06 12:0 a.m.44 views

Tenda i22 formWifiMacFilterGet function buffer overflow vulnerability

Tenda i22 is a wireless access point from Tenda, China. Tenda i22 is vulnerable to a buffer overflow vulnerability, which stems from a lack of length validation of input data in the index parameter of the formWifiMacFilterGet function. An attacker could exploit this vulnerability to cause a denia...

7.5CVSS4.5AI score0.00815EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/12/06 12:0 a.m.45 views

Tenda i22 formWifiMacFilterSet function buffer overflow vulnerability

Tenda i22 is a wireless access point from Tenda, China. Tenda i22 is vulnerable to a buffer overflow vulnerability that stems from a lack of length validation of input data in the index parameter of the formWifiMacFilterSet function. An attacker could exploit this vulnerability to cause a denial ...

7.5CVSS5.8AI score0.00815EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/12/02 12:0 a.m.8 views

Tenda i22 安全漏洞

Tenda i22 is a wireless access point from Tenda, China. Tenda i22 is vulnerable to a buffer overflow vulnerability, which stems from a lack of length validation of input data in the list parameter of the formwrlSSIDget function. An attacker could exploit this vulnerability to cause a denial of...

7.5CVSS7.3AI score0.00815EPSS
SaveExploits1References2
Rows per page
Query Builder