Lucene search
+L

1448 matches found

NVD
NVD
•added 2019/07/12 8:15 p.m.•22 views

CVE-2019-13161

An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chansip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to a...

5.3CVSS5.1AI score0.04013EPSS
SaveExploits0References4
OSV
OSV
•added 2019/07/12 8:15 p.m.•32 views

CVE-2019-13161

An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chansip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to a...

5.3CVSS6.4AI score
SaveExploits0References4
OSV
OSV
•added 2019/07/12 8:15 p.m.•10 views

ALPINE-CVE-2019-13161

An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chansip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to a...

5.3CVSS6.9AI score0.04013EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2019/07/12 8:15 p.m.•32 views

CVE-2019-13161

An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chansip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to a...

5.3CVSS6.3AI score0.04013EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2019/07/12 8:15 p.m.•36 views

CVE-2019-13161

An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chansip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to a...

5.3CVSS5.6AI score0.04013EPSS
SaveExploits0References5
Prion
Prion
•added 2019/07/12 8:15 p.m.•33 views

Null pointer dereference

An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chansip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to a...

3.5CVSS5.3AI score0.04013EPSS
SaveExploits0References4Affected Software3
Debian CVE
Debian CVE
•added 2019/07/12 7:24 p.m.•68 views

CVE-2019-13161

An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chansip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to a...

5.3CVSS5.7AI score0.04013EPSS
SaveExploits0
Cvelist
Cvelist
•added 2019/07/12 7:24 p.m.•40 views

CVE-2019-13161

An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chansip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to a...

5.4AI score0.04013EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2019/07/12 7:24 p.m.•87 views

CVE-2019-13161

An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chansip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to a...

5.3CVSS5.5AI score0.04013EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/12 12:00 a.m.•3 views

CVE-2019-13161: NULL Pointer Dereference

An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chansip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to a...

5.3CVSS5.7AI score0.04013EPSS
SaveExploits0References2
OSV
OSV
•added 2019/06/07 9:29 p.m.•15 views

CVE-2019-3956

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating CltDHPubKeyLen during key negotiation, which could crash the application or leak sensitive information...

7.4CVSS7.4AI score0.01633EPSS
SaveExploits1References1
OSV
OSV
•added 2019/06/07 9:29 p.m.•15 views

CVE-2019-3957

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating RsaSignatureLen during key negotiation, which could crash the application or leak sensitive information...

7.4CVSS7.4AI score0.25593EPSS
SaveExploits1References1
NVD
NVD
•added 2019/06/07 9:29 p.m.•31 views

CVE-2019-3956

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating CltDHPubKeyLen during key negotiation, which could crash the application or leak sensitive information...

7.4CVSS7.7AI score0.01633EPSS
SaveExploits1References1
Prion
Prion
•added 2019/06/07 9:29 p.m.•21 views

Buffer overflow

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating RsaSignatureLen during key negotiation, which could crash the application or leak sensitive information...

5.8CVSS7.7AI score0.25593EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2019/06/07 9:29 p.m.•28 views

Buffer overflow

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating CltDHPubKeyLen during key negotiation, which could crash the application or leak sensitive information...

5.8CVSS7.7AI score0.01633EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2019/06/07 8:02 p.m.•33 views

CVE-2019-3957

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating RsaSignatureLen during key negotiation, which could crash the application or leak sensitive information...

7.7AI score0.25593EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2019/06/07 8:01 p.m.•36 views

CVE-2019-3956

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating CltDHPubKeyLen during key negotiation, which could crash the application or leak sensitive information...

7.9AI score0.01633EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/07 12:00 a.m.•5 views

CVE-2019-3957: Improper Input Validation

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating RsaSignatureLen during key negotiation, which could crash the application or leak sensitive information...

7.4CVSS5.9AI score0.25593EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2019/05/14 12:00 a.m.•38 views

EulerOS Virtualization 3.0.1.0 : thrift (EulerOS-SA-2019-1458)

According to the versions of the thrift packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security...

7.5CVSS7AI score0.08188EPSS
SaveExploits0References3
OSV
OSV
•added 2019/05/03 8:29 p.m.•23 views

CVE-2019-6619

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, the Traffic Management Microkernel TMM may restart when a virtual server has an HTTP/2 profile with Application Layer Protocol Negotiation ALPN enabled and it processes traffic where the ALPN extension size is zero...

7.5CVSS5.8AI score0.01766EPSS
SaveExploits0References2
Rows per page
Query Builder