Lucene search
+L

4528 matches found

Tenable Nessus
Tenable Nessus
added 2023/11/15 12:00 a.m.23 views

Rockwell Automation Stratix Cisco IOS and IOS XE and Cisco Unified Communications Manager Software Session Initiation Protocol Memory Leak (CVE-2016-1350)

A vulnerability in the Session Initiation Protocol SIP gateway implementation in Cisco IOS, IOS XE, and Cisco Unified Communications Manager Software could allow an unauthenticated, remote attacker to cause a memory leak and eventual reload of an affected device. The vulnerability is due to...

7.8CVSS7.1AI score0.03323EPSS
SaveExploits0References4
Oracle linux
Oracle linux
added 2023/11/12 12:00 a.m.47 views

qt5 security and bug fix update

adwaita-qt 1.4.2-1 - 1.4.2 Resolves: bz2175754 python-pyqt5-sip 12.11.1-1 - 12.11.1 Resolves: bz2188589 python-qt5 5.15.9-1 - 5.15.9 Resolves: bz2175758 qgnomeplatform 0.9.0-1 - 0.9.0 Resolves: bz2175753 qt5 5.15.9-1 - 5.15.9 Resolves: bz2175724 qt5-doc 5.15.9-1 - 5.15.9 Resolves: bz2175726...

7.5CVSS6.9AI score0.0158EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2023/10/26 12:00 a.m.13 views

The vulnerability of the Sofia-SIP user agent library (session initiation protocol) lies in its ability to write data beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Sofia-SIP user agent library session initiation protocol relates to the possibility of writing beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted STUN packets remotely...

10CVSS8.3AI score0.0238EPSS
SaveExploits1References7Affected Software4
OpenVAS
OpenVAS
added 2023/10/25 12:00 a.m.15 views

Ubuntu: Security Advisory (USN-6448-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.01056EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2023/10/24 6:43 a.m.50 views

USN-6448-1: Sofia-SIP vulnerability

Xu Biang discovered that Sofia-SIP did not properly manage memory when handling STUN packets. An attacker could use this issue to cause Sofia-SIP to crash, resulting in a denial of service, or possibly execute arbitrary code...

7.5CVSS7.3AI score0.01056EPSS
SaveExploits0
OSV
OSV
added 2023/10/24 6:43 a.m.9 views

USN-6448-1 sofia-sip vulnerability

Xu Biang discovered that Sofia-SIP did not properly manage memory when handling STUN packets. An attacker could use this issue to cause Sofia-SIP to crash, resulting in a denial of service, or possibly execute arbitrary code...

7.5CVSS7.1AI score0.01056EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/10/24 12:00 a.m.27 views

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Sofia-SIP vulnerability (USN-6448-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6448-1 advisory. Xu Biang discovered that Sofia-SIP did not properly manage memory when handling STUN packets. An attacker coul...

7.5CVSS7.6AI score0.01056EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/17 12:00 a.m.13 views

YeaLink SIP-T19P-E2 OS Command Injection Vulnerability

YeaLink SIP-T19P-E2 is a VOIP phone from China YeaLink. A security vulnerability exists in YeaLink SIP-T19P-E2 version v.53.84.0.15, which originates from a vulnerability that allows a privileged attacker to execute arbitrary code via a specially crafted request via the ping feature of the...

8.8CVSS7.6AI score0.01605EPSS
SaveExploits1References3
OSV
OSV
added 2023/10/13 12:15 a.m.11 views

CVE-2023-44198

An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networks. If the SIP ALG is configured and a device receives a...

7.5CVSS5.8AI score0.00354EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/13 12:15 a.m.20 views

CVE-2023-44198

An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networks. If the SIP ALG is configured and a device receives a...

7.5CVSS6.6AI score0.00354EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/13 12:15 a.m.25 views

Input validation

An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networks. If the SIP ALG is configured and a device receives a...

5CVSS7.6AI score0.00354EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/12 11:05 p.m.16 views

CVE-2023-44198 Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets

An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networks. If the SIP ALG is configured and a device receives a...

5.8CVSS7.1AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/12 11:05 p.m.24 views

CVE-2023-44198 Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets

An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networks. If the SIP ALG is configured and a device receives a...

5.8CVSS7.8AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/12 11:05 p.m.70 views

CVE-2023-44198

CVE-2023-44198 affects Juniper Networks Junos OS SIP ALG on SRX Series and MX Series. The vulnerability stems from an improper check for unusual or exceptional conditions, enabling an unauthenticated, network-based attacker to cause an integrity impact in connected networks. When SIP ALG is enabl...

7.5CVSS6.6AI score0.00354EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/10/11 12:00 a.m.41 views

Juniper Junos OS Vulnerability (JSA73164)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73164 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated...

7.5CVSS7.4AI score0.00354EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/10/06 12:00 a.m.10 views

PJSIP Resource Management Error Vulnerability

PJSIP is a free and open source multimedia communications library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. A resource management error vulnerability exists in versions of PJSIP prior to 2.14, which stems from a higher-level transfer being...

9.8CVSS6.7AI score0.0129EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/09/27 12:00 a.m.6 views

PT-2023-8586 · Unknown +1 · Freeswitch +1

Name of the Vulnerable Software and Affected Versions: FreeSWITCH versions prior to 1.10.11 Description: The issue is related to incorrect handling of exceptional states in the FreeSWITCH software-defined telecom stack, which can lead to a Denial of Service DoS when handling DTLS-SRTP for media...

7.8CVSS6.3AI score0.01485EPSS
SaveExploits4References21
BDU FSTEC
BDU FSTEC
added 2023/09/25 12:00 a.m.11 views

The vulnerability of the ipportFilter function in D-Link DIR-816 A2 router software, which involves writing beyond buffer boundaries in memory, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ipportFilter function in D-Link DIR-816 A2 router software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8AI score0.12242EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/09/21 1:15 p.m.6 views

CVE-2023-43240

D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter sipaddress in ipportFilter...

9.8CVSS5.8AI score0.12242EPSS
SaveExploits1References3
OSV
OSV
added 2023/09/21 1:15 p.m.7 views

CVE-2023-43240

D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter sipaddress in ipportFilter...

9.8CVSS5.8AI score0.12242EPSS
SaveExploits1References2
Rows per page
Query Builder