Lucene search
+L

66 matches found

CVE
CVE
added 2026/06/01 6:04 p.m.48 views

CVE-2026-43623

CVE-2026-43623 affects microtar up to version 0.1.0. A stack-based buffer overflow in the raw_to_header() function (src/microtar.c) can be triggered by crafted TAR archives with non-null-terminated name or linkname fields. The function uses strcpy() to copy 100-byte ustar fields, which can write ...

8.8CVSS6AI score0.00318EPSS
SaveExploits0References4
Veracode
Veracode
added 2026/04/30 6:14 a.m.19 views

Null Pointer Dereference

github.com/emiago/sipgo is vulnerable to a Null pointer dereference. The vulnerability is due to missing nil checks for the To header in the NewResponseFromRequest function, which allows an attacker to exploit it by sending a malformed SIP request without a To header and crash the application...

8.7CVSS7.7AI score0.00547EPSS
SaveExploits1References3Affected Software1
SUSE CVE
SUSE CVE
added 2026/04/24 1:44 a.m.27 views

SUSE CVE-2009-3727

Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6.1.x before 1.6.1.9; Business Edition A.x.x, B.x.x before B.2.5.12, C.2.x.x before C.2.4.5, and C.3.x.x before C.3.2.2; AsteriskNOW 1.5; and s800i 1.3.x before 1.3.0.5 generate different error message...

5CVSS5.8AI score0.04201EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/01/06 12:24 a.m.12 views

SUSE CVE-2025-68274

SIPGO is a library for writing SIP services in the GO language. Starting in version 0.3.0 and prior to version 1.0.0-alpha-1, a nil pointer dereference vulnerability is in the SIPGO library's NewResponseFromRequest function that affects all normal SIP operations. The vulnerability allows remote...

8.7CVSS7.2AI score0.00547EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/12/17 10:08 p.m.18 views

CVE-2025-68274

SIPGO is a library for writing SIP services in the GO language. Starting in version 0.3.0 and prior to version 1.0.0-alpha-1, a nil pointer dereference vulnerability is in the SIPGO library's NewResponseFromRequest function that affects all normal SIP operations. The vulnerability allows remote...

8.7CVSS7.1AI score0.00547EPSS
SaveExploits1References1
NVD
NVD
added 2025/12/16 10:15 p.m.15 views

CVE-2025-68274

SIPGO is a library for writing SIP services in the GO language. Starting in version 0.3.0 and prior to version 1.0.0-alpha-1, a nil pointer dereference vulnerability is in the SIPGO library's NewResponseFromRequest function that affects all normal SIP operations. The vulnerability allows remote...

8.7CVSS0.00547EPSS
SaveExploits1References2
CVE
CVE
added 2025/12/16 10:02 p.m.42 views

CVE-2025-68274

CVE-2025-68274 describes a nil pointer dereference in the SIPGO library when building SIP responses with NewResponseFromRequest, triggered if the incoming SIP request is missing a To header. The issue can cause a remote attacker to crash SIP applications that use this function, effectively a deni...

8.7CVSS6.8AI score0.00547EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
added 2025/12/16 10:02 p.m.14 views

EUVD-2025-203854

SIPGO is a library for writing SIP services in the GO language. Starting in version 0.3.0 and prior to version 1.0.0-alpha-1, a nil pointer dereference vulnerability is in the SIPGO library's NewResponseFromRequest function that affects all normal SIP operations. The vulnerability allows remote...

8.7CVSS6.6AI score0.00547EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/12/16 10:02 p.m.34 views

CVE-2025-68274 SIPGO library has response DoS vulnerability via nil pointer dereference

SIPGO is a library for writing SIP services in the GO language. Starting in version 0.3.0 and prior to version 1.0.0-alpha-1, a nil pointer dereference vulnerability is in the SIPGO library's NewResponseFromRequest function that affects all normal SIP operations. The vulnerability allows remote...

8.7CVSS0.00547EPSS
SaveExploits1References2
OSV
OSV
added 2025/12/16 10:02 p.m.14 views

CVE-2025-68274 SIPGO library has response DoS vulnerability via nil pointer dereference

SIPGO is a library for writing SIP services in the GO language. Starting in version 0.3.0 and prior to version 1.0.0-alpha-1, a nil pointer dereference vulnerability is in the SIPGO library's NewResponseFromRequest function that affects all normal SIP operations. The vulnerability allows remote...

8.7CVSS7AI score
SaveExploits0References4
Snyk
Snyk
added 2025/12/16 9:24 p.m.6 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the NewResponseFromRequest function. An attacker can cause the application to crash by sending a specially crafted SIP request that omits the required To header. Remediation Upgrade github.com/emiago/sipgo/s...

8.7CVSS6.8AI score0.00547EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2025/12/16 9:24 p.m.21 views

SIPGO is Vulnerable to Response DoS via Nil Pointer Dereference

Description A nil pointer dereference vulnerability was discovered in the SIPGO library's NewResponseFromRequest function that affects all normal SIP operations. The vulnerability allows remote attackers to crash any SIP application by sending a single malformed SIP request without a To header. T...

8.7CVSS7AI score0.00547EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2025/12/16 9:24 p.m.15 views

GHSA-C623-F998-8HHV SIPGO is Vulnerable to Response DoS via Nil Pointer Dereference

Description A nil pointer dereference vulnerability was discovered in the SIPGO library's NewResponseFromRequest function that affects all normal SIP operations. The vulnerability allows remote attackers to crash any SIP application by sending a single malformed SIP request without a To header. T...

8.7CVSS6.9AI score0.00547EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/12/16 12:00 a.m.9 views

PT-2025-51791

Name of the Vulnerable Software and Affected Versions SIPGO versions 0.3.0 through 1.0.0-alpha-1 Description SIPGO is a library for writing SIP services in the GO language. A nil pointer dereference exists in the NewResponseFromRequest function, impacting normal SIP operations. This allows a remo...

8.7CVSS7.6AI score0.00547EPSS
SaveExploits1
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2010-2839

Malware in sbrugna...

7.8CVSS6.1AI score0.01785EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2025-11565

Malicious code in bioql PyPI...

7.1CVSS7.7AI score0.0015EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2023-27599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, when the function appendhf handles a SIP message with a...

7.5CVSS6.9AI score0.00971EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/08/29 3:05 a.m.213 views

Exploit for Unprotected Alternate Channel in Crushftp

CrushFTP AS2 Authentication Bypass – CVE-2025-54309 Aut...

9.8CVSS7.4AI score0.94905EPSS
SaveExploits7
RedhatCVE
RedhatCVE
added 2025/04/25 3:51 p.m.10 views

CVE-2025-39423

Cross-Site Request Forgery CSRF vulnerability in Jenst Add to Header add-to-header allows Stored XSS.This issue affects Add to Header: from n/a through = 1.0...

7.1CVSS7.2AI score0.0015EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/17 4:15 p.m.9 views

CVE-2025-39423

Cross-Site Request Forgery CSRF vulnerability in Jenst Add to Header add-to-header allows Stored XSS.This issue affects Add to Header: from n/a through = 1.0...

7.1CVSS0.0015EPSS
SaveExploits0References1
Rows per page
Query Builder