Lucene search
+L

658 matches found

OSV
OSV
•added 2018/09/12 11:29 p.m.•13 views

UBUNTU-CVE-2018-16981

stb stbimage.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbioutgifcode function...

8.8CVSS6.1AI score0.01592EPSS
SaveExploits1References4
OSV
OSV
•added 2018/09/12 11:29 p.m.•11 views

DEBIAN-CVE-2018-16981

stb stbimage.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbioutgifcode function...

8.8CVSS7.5AI score0.01592EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/09/12 12:00 a.m.•13 views

PT-2018-13814

Name of the Vulnerable Software and Affected Versions stb image.h version 2.19 Description The issue is a heap-based buffer overflow in the stbi out gif code function. This problem affects products that use stb image.h, including catimg and Emscripten. Recommendations For stb image.h version 2.19...

8.8CVSS7.4AI score0.0379EPSS
SaveExploits7References55
Positive Technologies
Positive Technologies
•added 2018/07/28 12:00 a.m.•13 views

PT-2018-3777 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel versions prior to 1.8.5 Description: The issue is related to an invalid read in the stb image.h component of libsixel, which can be exploited by attackers to cause a denial of service DOS via a crafted PSD file. This can be achieved ...

9.8CVSS5.6AI score0.01551EPSS
SaveExploits21References65
OSV
OSV
•added 2018/07/09 9:29 p.m.•31 views

UBUNTU-CVE-2018-13794

A heap-based buffer overflow exists in stbibmploadcont in stbimage.h in catimg 2.4.0...

9.8CVSS7.5AI score0.01545EPSS
SaveExploits0References3
CNVD
CNVD
•added 2018/07/03 12:00 a.m.•19 views

Unspecified vulnerability in jpeg-compressor

jpeg-compressor is an encoder for generating JPEG format files. A security vulnerability exists in the 'bmpload' function of the stbimage.c file in jpeg-compressor version 0.1. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer overflow and application crash...

7.8CVSS7.2AI score0.01573EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
•added 2018/06/14 6:02 a.m.•30 views

stb.gov.sg XSS vulnerability

Open Bug Bounty ID: OBB-631892 Description| Value ---|--- Affected Website:| stb.gov.sg Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
NVD
NVD
•added 2018/03/20 3:29 p.m.•24 views

CVE-2017-8176

Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and modify the configuration. Successful exploit could lead to the authentication bypass and view...

7.5CVSS7.6AI score0.00905EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2018/03/20 3:00 p.m.•28 views

CVE-2017-8176

Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and modify the configuration. Successful exploit could lead to the authentication bypass and view...

7.7AI score0.00905EPSS
SaveExploits0References2
CVE
CVE
•added 2018/03/20 3:00 p.m.•69 views

CVE-2017-8176

CVE-2017-8176 pertains to Huawei IPTV STB (earlier than V100R003C01LMYTa6SPC001). The vulnerability is an authentication bypass that could be exploited to access the device’s serial interface and modify configuration, potentially enabling viewing channels for free. Affected component/condition: H...

7.5CVSS7.6AI score0.00905EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/20 12:00 a.m.•2 views

CVE-2017-8176: Undefined Security Weakness

Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and modify the configuration. Successful exploit could lead to the authentication bypass and view...

7.5CVSS7.1AI score0.00905EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/02/26 12:00 a.m.•18 views

Sean Barrett stb_vorbis Buffer Overflow Vulnerability

Sean Barrett stbvorbis is a single-file public domain library based on C++. A buffer overflow vulnerability exists in the entire vorbis decoding path in Sean Barrett stbvorbis 1.12 and earlier. An attacker can exploit this vulnerability to corrupt memory, cause a denial of service, and execute a...

8.8CVSS7.5AI score0.01838EPSS
SaveExploits0References1
OSV
OSV
•added 2018/02/09 11:29 p.m.•13 views

UBUNTU-CVE-2018-1000050

Sean Barrett stbvorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All vorbis decoding paths. that can result in memory corruption, denial of service, comprised execution of host program. This attack appear to be exploitable via Victim must open a specially crafted Ogg...

8.8CVSS7.4AI score0.01838EPSS
SaveExploits0References4
Prion
Prion
•added 2017/09/07 9:29 p.m.•23 views

Design/Logic Flaw

A vulnerability in the HTTP remote procedure call RPC service of set-top box STB receivers manufactured by Cisco for Yes could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists because the firmware of an affected...

7.8CVSS7.5AI score0.01738EPSS
SaveExploits0References2
CVE
CVE
•added 2017/09/07 9:00 p.m.•68 views

CVE-2017-6631

The CVE-2017-6631 entry concerns Cisco YesMaxTotal, YesMax HD, and YesQuattro set-top box (STB) devices. The vulnerability is in the HTTP RPC service where the firmware fails to handle certain XML values on a local-subnet interface, allowing an unauthenticated, remote attacker to trigger a device...

7.8CVSS7.6AI score0.01738EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2017/03/31 12:00 a.m.•8 views

Stored Cross-Site Scripting Vulnerability in Converged Smart STB z84

Convergent smart set-top box z84, is a set-top box product of Shenzhen Zhaoneng Xuntong Technology Co., Ltd, is a wireless wifi and smart TV connection set in one device, is widely used in hotels and homes with smart TV set-top box for telecommunication. Converged Smart STB z84 has a stored...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2015/12/15 9:59 p.m.•30 views

Pyersinia - Network Attack Tool

Pyersinia is a similar tool to Yersinia, but Pyersinia is implemented in Python using Scapy. The main objective is the realization of network attacks such as spoofing ARP, DHCP DoS , STP DoS among others. The community can add new attacks on the tool in a simple way, using plugins. This is becaus...

7.2AI score
SaveExploits0References1
CVE
CVE
•added 2011/12/17 11:00 a.m.•117 views

CVE-2011-4859

CVE-2011-4859 concerns the Schneider Electric Quantum Ethernet Module family, where hard-coded credentials exist for 16 accounts (AUTCSE, AUT_CSE, fdrusers, ftpuser, loader, nic2212, nimrohs2212, nip2212, noe77111_v500, ntpupdate, pcfactory, sysdiag, target, test, USER, webserver). This enables r...

10CVSS6.6AI score0.03894EPSS
SaveExploits1References7Affected Software6
Rows per page
Query Builder