Lucene search
+L

2851 matches found

EUVD
EUVD
added 2026/04/21 9:31 p.m.11 views

EUVD-2026-24350

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Setup and Administration. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

9.8CVSS5.7AI score0.00376EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/21 9:16 p.m.14 views

CVE-2026-34275

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Setup and Administration. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

9.8CVSS0.00376EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/21 8:35 p.m.11 views

CVE-2026-34275

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Setup and Administration. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

9.8CVSS5.7AI score0.00376EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2026/04/21 12:00 a.m.17 views

Oracle Advanced Inbound Telephony 安全漏洞

Oracle Advanced Inbound Telephony is a call center call handling system developed by Oracle, a US-based company. Versions 12.2.3 to 12.2.15 of Oracle Advanced Inbound Telephony contain security vulnerabilities. These vulnerabilities stem from issues with the Setup and Administration component,...

9.8CVSS7.1AI score0.00376EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/21 12:00 a.m.18 views

PT-2026-34099

Name of the Vulnerable Software and Affected Versions Oracle Advanced Inbound Telephony versions 12.2.3 through 12.2.15 Description An issue in the Setup and Administration component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the syste...

9.8CVSS7.2AI score0.00376EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/04/11 6:26 p.m.6 views

CVE-2026-31845 Rukovoditel CRM Reflected XSS via zd_echo Parameter in Zadarma Telephony API Endpoint

A reflected cross-site scripting XSS vulnerability exists in Rukovoditel CRM version 3.6.4 and earlier in the Zadarma telephony API endpoint /api/tel/zadarma.php. The application directly reflects user-supplied input from the 'zdecho' GET parameter into the HTTP response without proper...

9.3CVSS4.9AI score0.00428EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:04 p.m.10 views

CVE-2026-25188

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network...

8.8CVSS6AI score0.00552EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/10 6:31 p.m.9 views

EUVD-2026-10661

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network...

8.8CVSS6.1AI score0.00552EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/10 6:31 p.m.10 views

EUVD-2026-10662

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network...

8.8CVSS6.1AI score0.00552EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/10 6:18 p.m.10 views

CVE-2026-25188

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network...

8.8CVSS0.00552EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/10 6:18 p.m.7 views

CVE-2026-25188

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network...

8.8CVSS6AI score0.00552EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/10 5:04 p.m.4 views

CVE-2026-25188 Windows Telephony Service Elevation of Privilege Vulnerability

...

8.8CVSS5.8AI score0.00552EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/10 5:04 p.m.5 views

CVE-2026-25188

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network...

8.8CVSS6.1AI score0.00552EPSS
SaveExploits0References2Affected Software21
Cvelist
Cvelist
added 2026/03/10 5:04 p.m.32 views

CVE-2026-25188 Windows Telephony Service Elevation of Privilege Vulnerability

...

8.8CVSS0.00552EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/10 5:04 p.m.58 views

CVE-2026-25188

CVE-2026-25188 is a Windows Telephony Service heap-based buffer overflow that allows an attacker on an adjacent network to elevate privileges. The CVE entry cites an adjacent-network attack vector, low exploit complexity, and no user interaction, with high impact on confidentiality, integrity, an...

8.8CVSS6AI score0.00552EPSS
SaveExploits0References1Affected Software14
Microsoft CVE
Microsoft CVE
added 2026/03/10 2:00 p.m.7 views

Windows Telephony Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network...

8.8CVSS6.1AI score0.00552EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/03/10 12:00 a.m.13 views

Microsoft Windows Telephony Server 安全漏洞

Microsoft Windows Telephony Server is a component of the American company Microsoft. It supports the Telephone Application Programming Interface TAPI, allowing computer programs to communicate with shared telephone services. There are security vulnerabilities in Microsoft Windows Telephony Server...

8.8CVSS5.8AI score0.00552EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/10 12:00 a.m.5 views

PT-2026-24312

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Telephony Service. This issue allows an unauthorized attacker to elevate privileges over an adjacent network. Recommendations At the moment,...

8.8CVSS6AI score0.00552EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2026/03/04 1:57 a.m.10 views

CVE-2025-48609

In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a path traversal error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not...

9.1CVSS6.1AI score0.00263EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/02 7:16 p.m.7 views

CVE-2025-48609

In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a path traversal error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not...

9.1CVSS5.9AI score0.00263EPSS
SaveExploits0References1
Rows per page
Query Builder