Lucene search
+L

224 matches found

Kitploit
Kitploit
added 2026/09/12 3:31 p.m.9 views

CVE-2026-36670

CVE-2026-36670 A time-based blind SQL injection exploit for the OpenSIPS Control Panel. This exploit abuses an authenticated sql injection vulnerability within the aliasmanagement.php module of opensips. The table GET parameter is improperly sanitized, allowing an attacker to inject a crafted...

8.8CVSS6AI score0.00361EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/08/06 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-45705

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the findlinedelimiter function in the multipart...

5.3CVSS5.5AI score0.00292EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/06 12:00 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-45538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions 4.0.0 and prior, processing a SIP message with a header name longer than 255...

9.8CVSS6.2AI score0.00583EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/06 12:00 a.m.18 views

Linux Distros Unpatched Vulnerability : CVE-2026-45103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the TCP message framing layer parses the...

7.5CVSS5.7AI score0.00328EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/06 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-45100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions 3.4.0-beta through 3.6.5 and 4.0.0-beta contain a buffer overflow in the s.b64enco...

9.1CVSS5.9AI score0.00673EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/06 12:00 a.m.18 views

Linux Distros Unpatched Vulnerability : CVE-2026-45537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the constructuri function concatenates multiple U...

9.1CVSS5.6AI score0.00354EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/05 1:09 a.m.16 views

CVE-2026-46334

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the SDP bandwidth-line parsing logic. A SIP request with Content-Type: application/sdp and a malformed session-level SDP bandwidth line missing t...

8.7CVSS5.4AI score0.00488EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/05 12:17 a.m.18 views

CVE-2026-46334

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the SDP bandwidth-line parsing logic. A SIP request with Content-Type: application/sdp and a malformed session-level SDP bandwidth line missing t...

8.7CVSS0.00488EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/05 12:17 a.m.16 views

CVE-2026-45809

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the watcherinfo generation functionality. An attacker can create an oversized watcher entry by sending a SUBSCRIBE Event: presence request with a...

8.7CVSS0.00388EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/05 12:16 a.m.19 views

CVE-2026-45705

OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the findlinedelimiter function in the multipart body parser performs an out-of-bounds read via strncmp when searching for MIME boundary delimiters. After finding a -- pattern near the en...

5.3CVSS0.00292EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/05 12:10 a.m.11 views

CVE-2026-45705

OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the findlinedelimiter function in the multipart body parser performs an out-of-bounds read via strncmp when searching for MIME boundary delimiters. After finding a -- pattern near the en...

5.3CVSS5.3AI score0.00292EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/05 12:10 a.m.9 views

CVE-2026-45809

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the watcherinfo generation functionality. An attacker can create an oversized watcher entry by sending a SUBSCRIBE Event: presence request with a...

8.7CVSS5.4AI score0.00388EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/04 11:50 p.m.16 views

EUVD-2026-53010

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the SDP bandwidth-line parsing logic. A SIP request with Content-Type: application/sdp and a malformed session-level SDP bandwidth line missing t...

8.7CVSS5.5AI score0.00488EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/04 11:50 p.m.7 views

CVE-2026-46334

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the SDP bandwidth-line parsing logic. A SIP request with Content-Type: application/sdp and a malformed session-level SDP bandwidth line missing t...

8.7CVSS5.5AI score0.00488EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/08/04 11:50 p.m.44 views

CVE-2026-46334 OpenSIPS: Denial of Service in SDP bandwidth parsing via QoS SDP cloning

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the SDP bandwidth-line parsing logic. A SIP request with Content-Type: application/sdp and a malformed session-level SDP bandwidth line missing t...

8.7CVSS0.00488EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/04 11:50 p.m.78 views

CVE-2026-46334

Technical details for CVE-2026-46334 are not provided in the supplied documents; only high-level info and fixes are available. Monitor for updates in the connected sources.

8.7CVSS5.5AI score0.00488EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/08/04 11:50 p.m.10 views

CVE-2026-46334 OpenSIPS: Denial of Service in SDP bandwidth parsing via QoS SDP cloning

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the SDP bandwidth-line parsing logic. A SIP request with Content-Type: application/sdp and a malformed session-level SDP bandwidth line missing t...

8.7CVSS5.5AI score0.00488EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/04 11:50 p.m.18 views

CVE-2026-46334 OpenSIPS: Denial of Service in SDP bandwidth parsing via QoS SDP cloning

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the SDP bandwidth-line parsing logic. A SIP request with Content-Type: application/sdp and a malformed session-level SDP bandwidth line missing t...

8.7CVSS5.5AI score
SaveExploits0References5
CVE
CVE
added 2026/08/04 11:30 p.m.72 views

CVE-2026-45809

OpenSIPS denial-of-service in watcherinfo XML generation (CVE-2026-45809). Affected: OpenSIPS before 3.6.6 and 4.0.0-rc1. Root cause: copying the stored watcher URI into a fixed-size stack buffer during presence.winfo watcherinfo XML generation when an oversized watcher entry is created by a long...

8.7CVSS5.5AI score0.00388EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/04 11:30 p.m.8 views

CVE-2026-45809

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the watcherinfo generation functionality. An attacker can create an oversized watcher entry by sending a SUBSCRIBE Event: presence request with a...

8.7CVSS5.5AI score0.00388EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder