Lucene search
K

438 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 6:41 p.m.14 views

CVE-2017-16289

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS7.7AI score0.00673EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:41 p.m.13 views

CVE-2017-16322

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS7.7AI score0.00853EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:41 p.m.8 views

CVE-2017-16331

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS7.7AI score0.00853EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:40 p.m.10 views

CVE-2017-16267

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS7.7AI score0.00853EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:40 p.m.15 views

CVE-2017-16285

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS7.7AI score0.00673EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/29 12:0 a.m.3 views

GitHub Enterprise Server 安全漏洞

GitHub Enterprise Server is an open source application from GitHub in the United States. It provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server that stem...

7.1CVSS7AI score0.00356EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/12/04 12:0 a.m.1 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from an incorrect boundary check in rpcmsghandler and related handlers in drivers/misc/mediatek/ecci/portrpc.c, where an out-of-bounds write may exist...

7.8CVSS9.2AI score0.00084EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/04 12:0 a.m.3 views

PT-2024-10663 · Google · Android +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write in the rpc msg handler and related handlers of drivers/misc/mediatek/eccci/port rpc.c due to an...

7.8CVSS6.7AI score0.00084EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:0 a.m.2 views

The vulnerability of the Message Handler component in the multi-platform web solution for creating Scada systems, Scada-LTS, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Message Handler component in the multi-platform web solution for creating Scada systems is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks...

5.5CVSS5.2AI score0.00338EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2024/11/13 4:9 p.m.40 views

CVE-2024-9413

CVE-2024-9413 affects ARM SCP-Firmware, specifically SCP-Firmware releases 2.11.0–2.15.0. The root cause is improper error handling in the transport_message_handler, which could enable an Application Processor (AP) to trigger a buffer overflow in SCP firmware. Documented impact indicates high con...

8CVSS7.6AI score0.00365EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.2 views

ARM SCP-Firmware 安全漏洞

ARM SCP-Firmware is a firmware driver from ARM UK. A security vulnerability exists in ARM SCP-Firmware versions 2.11.0-2.15.0, which stems from the failure of the transportmessagehandler function to properly handle errors, resulting in a buffer overflow...

8CVSS7.1AI score0.00365EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/30 12:0 a.m.3 views

The vulnerability of the CIP Message Handler component in Rockwell Automation’s programmable logic controllers ControlLogix 5580, CompactLogix 5380, Compact GuardLogix 5380 SIL 2, Compact GuardLogix 5380 SIL 3, CompactLogix 5480, FactoryTalk Logix Echo allows a intruder to trigger a service failure.

The vulnerability of the CIP Message Handler component in Rockwell Automation’s programmable logic controllers ControlLogix 5580, CompactLogix 5380, Compact GuardLogix 5380 SIL 2, Compact GuardLogix 5380 SIL 3, CompactLogix 5480, and FactoryTalk Logix Echo is related to errors in processing input...

7.8CVSS5.4AI score0.00524EPSS
Exploits0References5Affected Software8
Positive Technologies
Positive Technologies
added 2024/10/10 12:0 a.m.3 views

PT-2024-7383 · Rockwell Automation · Factorytalk Logix Echo +5

Name of the Vulnerable Software and Affected Versions: Rockwell Automation ControlLogix versions affected versions not specified Rockwell Automation CompactLogix 5380 affected versions not specified Rockwell Automation Compact GuardLogix 5380 SIL 2 affected versions not specified Rockwell...

8.7CVSS6.9AI score0.00524EPSS
Exploits0References11
BDU FSTEC
BDU FSTEC
added 2024/10/03 12:0 a.m.1 views

The vulnerability of the Message Handler component in the DS-7604NXI-K1/4P microprogramming system for IP cameras allows a intruder to disclose protected information or cause a malfunction in the service.

The vulnerability of the Message Handler component in the DS-7604NXI-K1/4P microprogramming system for IP cameras involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause malfunctions in the...

5.5CVSS5.7AI score0.00413EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/03 12:0 a.m.2 views

The vulnerability of the Message Handler component in Hikvision’s microprogrammed IP cameras DS-7604NI-K1/4P(B) allows a intruder to trigger a service failure.

The vulnerability of the Message Handler component in Hikvision’s DS-7604NI-K1/4PB microprogrammed software cameras is related to the handling of the zero pointer. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

4CVSS5.5AI score0.00446EPSS
Exploits0References3
NVD
NVD
added 2024/08/17 9:15 p.m.12 views

CVE-2024-7901

A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/app.shtm/alarms/Scada of the component Message Handler. The manipulation leads to cross site scripting. The attack can be launched...

5.4CVSS0.00338EPSS
Exploits0References3
OSV
OSV
added 2024/08/17 9:15 p.m.11 views

CVE-2024-7901

A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/app.shtm/alarms/Scada of the component Message Handler. The manipulation leads to cross site scripting. The attack can be launched...

5.4CVSS6.5AI score
Exploits0References3
CVE
CVE
added 2024/08/17 9:0 p.m.48 views

CVE-2024-7901

CVE-2024-7901 affects Scada-LTS 2.7.8, specifically the Message Handler component. The vulnerability stems from an unknown functionality in the file /Scada-LTS/app.shtm#/alarms/Scada, enabling remote cross-site scripting. The exploit has been publicly disclosed. Remediation: a fix is planned for ...

5.4CVSS3.8AI score0.00338EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/17 9:0 p.m.15 views

CVE-2024-7901 Scada-LTS Message Scada cross site scripting

A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/app.shtm/alarms/Scada of the component Message Handler. The manipulation leads to cross site scripting. The attack can be launched...

5.3CVSS3.8AI score0.00338EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/08/17 9:0 p.m.14 views

CVE-2024-7901 Scada-LTS Message Scada cross site scripting

A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/app.shtm/alarms/Scada of the component Message Handler. The manipulation leads to cross site scripting. The attack can be launched...

5.3CVSS0.00338EPSS
Exploits0References3
Rows per page
Query Builder