Lucene search
+L

87 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/11 12:00 a.m.•1 views

CVE-2024-30097: Double Free

Microsoft Speech Application Programming Interface SAPI Remote Code Execution Vulnerability...

8.8CVSS7.9AI score0.01729EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2024/06/11 12:00 a.m.•307 views

KB5039211: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (June 2024)

The remote Windows host is missing security update 5039211. It is, therefore, affected by multiple vulnerabilities - Microsoft Speech Application Programming Interface SAPI Remote Code Execution Vulnerability CVE-2024-30097 - Windows Remote Access Connection Manager Information Disclosure...

9.8CVSS7.5AI score0.68202EPSS
SaveExploits20References29
Tenable Nessus
Tenable Nessus
•added 2024/06/11 12:00 a.m.•157 views

KB5039214: Windows 10 Version 1607 / Windows Server 2016 Security Update (June 2024)

The remote Windows host is missing security update 5039214. It is, therefore, affected by multiple vulnerabilities - Microsoft Speech Application Programming Interface SAPI Remote Code Execution Vulnerability CVE-2024-30097 - Windows Remote Access Connection Manager Information Disclosure...

9.8CVSS7.1AI score0.73725EPSS
SaveExploits17References29
Prion
Prion
•added 2023/11/14 6:15 p.m.•27 views

Privilege escalation

Microsoft Speech Application Programming Interface SAPI Elevation of Privilege Vulnerability...

4.3CVSS6.9AI score0.0061EPSS
SaveExploits0References1Affected Software11
Cvelist
Cvelist
•added 2023/11/14 5:57 p.m.•54 views

CVE-2023-36719 Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

...

7.8CVSS8.8AI score0.0061EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/14 5:57 p.m.•309 views

CVE-2023-36719

Technical details about CVE-2023-36719, including affected products, root cause, impact, or fixes, are not publicly provided in the supplied documents. Monitor for updates from official sources.

7.8CVSS8.5AI score0.0061EPSS
SaveExploits0References1Affected Software14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•2 views

CVE-2023-36719: Improper Input Validation

Microsoft Speech Application Programming Interface SAPI Elevation of Privilege Vulnerability...

7.8CVSS7.4AI score0.0061EPSS
SaveExploits0References2
F5 Networks
F5 Networks
•added 2023/02/21 6:46 p.m.•91 views

K17839423: PHP vulnerability CVE-2021-21703

Security Advisory Description In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to...

7.8CVSS7.8AI score0.01426EPSS
SaveExploits1
SUSE CVE
SUSE CVE
•added 2023/02/15 6:13 a.m.•8 views

SUSE CVE-2007-0907

Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapiheaderop function...

5CVSS6.9AI score0.02296EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2023/02/15 6:08 a.m.•12 views

SUSE CVE-2008-2050

Stack-based buffer overflow in the FastCGI SAPI fastcgi.c in PHP before 5.2.6 has unknown impact and attack vectors...

10CVSS7.6AI score0.03441EPSS
SaveExploits1References5
Redos
Redos
•added 2022/08/26 12:00 a.m.•60 views

ROS-20220826-01

A vulnerability in the phpurlparseex function of the PHP programming language interpreter is related to insufficient validation of incoming requests. Exploitation of the vulnerability could allow a remote attacker to launch an SSRF attack Vulnerability in the SOAP extension of the PHP interpreter...

9.8CVSS8.5AI score0.58123EPSS
SaveExploits9
BDU FSTEC
BDU FSTEC
•added 2022/04/27 12:00 a.m.•17 views

The vulnerability of the sapi/cgi/cgi_main.c component of the PHP programming language interpreter allows a hacker to execute arbitrary code.

The vulnerability of the sapi/cgi/cgimain.c component of the PHP programming language interpreter is related to the lack of validation for the sequences of XML objects. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.5CVSS7.6AI score0.69266EPSS
SaveExploits5References18Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/04/25 12:00 a.m.•15 views

The vulnerability of the sapi_header_op function in the PHP programming language allows attackers to carry out XSS attacks.

The vulnerability of the sapiheaderop function in the PHP programming language is related to the lack of measures taken to protect web page structures. Exploiting this vulnerability allows an attacker to perform XSS attacks remotely...

6.1CVSS6.6AI score0.02959EPSS
SaveExploits0References8Affected Software3
Mageia
Mageia
•added 2021/10/31 11:12 a.m.•51 views

Updated php packages fix security vulnerability

Updated php packages fix security vulnerability: In PHP versions 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access memory shared with the main...

7.8CVSS2.6AI score0.01426EPSS
SaveExploits1References2
NVD
NVD
•added 2021/10/25 6:15 a.m.•28 views

CVE-2021-21703

In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access memory shared with the...

7.8CVSS0.01426EPSS
SaveExploits1References12
Debian CVE
Debian CVE
•added 2021/10/25 5:40 a.m.•55 views

CVE-2021-21703

Removed by vendor...

7.8CVSS7.5AI score0.01426EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2021/10/25 5:40 a.m.•40 views

CVE-2021-21703

In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access memory shared with the...

7.8CVSS7.4AI score0.01426EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/25 12:00 a.m.•2 views

CVE-2021-21703: Out-of-bounds Write

In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access memory shared with the...

7.8CVSS7.9AI score0.01426EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2021/09/07 12:00 a.m.•12 views

The vulnerability of the sapi/cgi/cgi_main.c component of the PHP programming language interpreter allows a hacker to execute arbitrary code.

The vulnerability of the sapi/cgi/cgimain.c component of the PHP programming language interpreter exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.5CVSS9AI score0.99998EPSS
SaveExploits46References10Affected Software2
Tenable Nessus
Tenable Nessus
•added 2019/08/12 12:00 a.m.•49 views

Fedora 29 : php (2019-f07db8f031)

PHP version 7.2.21 01 Aug 2019 Date: - Fixed bug php69044 discrepency between time and microtime. krakjoe EXIF: - Fixed bug php78256 heap-buffer-overflow on exifprocessusercomment. CVE-2019-11042 Stas - Fixed bug php78222 heap-buffer-overflow on exifscanthumbnail. CVE-2019-11041 Stas Fileinfo: -...

7.1CVSS6.5AI score0.0442EPSS
SaveExploits2References3
Rows per page
Query Builder