Search Results (333427 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-40649 1 Google 1 Android 2025-06-27 8.4 High
In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-40651 1 Google 1 Android 2025-06-27 8.4 High
In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-40669 1 Google 1 Android 2025-06-27 8.4 High
In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-40670 1 Google 1 Android 2025-06-27 8.4 High
In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2021-33844 1 Sound Exchange Project 1 Sound Exchange 2025-06-27 5.5 Medium
A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacker with a crafted wav file, could cause an application to crash.
CVE-2021-23210 1 Sound Exchange Project 1 Sound Exchange 2025-06-27 5.5 Medium
A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file. An attacker with a crafted file, could cause an application to crash.
CVE-2021-23159 1 Sound Exchange Project 1 Sound Exchange 2025-06-27 5.5 Medium
A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file. The vulnerability is exploitable with a crafted file, that could cause an application to crash.
CVE-2023-34318 3 Fedoraproject, Redhat, Sound Exchange Project 4 Extra Packages For Enterprise Linux, Fedora, Enterprise Linux and 1 more 2025-06-27 7.8 High
A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code execution, or information disclosure.
CVE-2021-3643 1 Sound Exchange Project 1 Sound Exchange 2025-06-27 9.1 Critical
A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker to input a malicious file, leading to the disclosure of sensitive information.
CVE-2022-31650 1 Sound Exchange Project 1 Sound Exchange 2025-06-27 5.5 Medium
In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.
CVE-2022-31651 1 Sound Exchange Project 1 Sound Exchange 2025-06-27 5.5 Medium
In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.
CVE-2023-26590 3 Fedoraproject, Redhat, Sound Exchange Project 4 Extra Packages For Enterprise Linux, Fedora, Enterprise Linux and 1 more 2025-06-27 6.2 Medium
A floating point exception vulnerability was found in sox, in the lsx_aiffstartwrite function at sox/src/aiff.c:622:58. This flaw can lead to a denial of service.
CVE-2023-32627 3 Fedoraproject, Redhat, Sound Exchange Project 4 Extra Packages For Enterprise Linux, Fedora, Enterprise Linux and 1 more 2025-06-27 6.2 Medium
A floating point exception vulnerability was found in sox, in the read_samples function at sox/src/voc.c:334:18. This flaw can lead to a denial of service.
CVE-2021-23172 1 Sound Exchange Project 1 Sound Exchange 2025-06-27 5.5 Medium
A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash.
CVE-2024-44546 1 Powerjob 1 Powerjob 2025-06-27 9.8 Critical
Powerjob >= 3.20 is vulnerable to SQL injection via the version parameter.
CVE-2024-10971 1 Devolutions 1 Devolutions Server 2025-06-27 4.3 Medium
Improper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier allows a malicious authenticated user to obtain sensitive data via faulty permission.
CVE-2021-27704 1 Appspace 1 Appspace 2025-06-27 6.5 Medium
Appspace 6.2.4 is affected by Incorrect Access Control via the Appspace Web Portal password reset page.
CVE-2024-37400 1 Ivanti 1 Connect Secure 2025-06-27 N/A
An out of bounds read in Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to trigger an infinite loop, causing a denial of service.
CVE-2024-38654 1 Ivanti 1 Secure Access Client 2025-06-27 N/A
Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker with admin privileges to cause a denial of service.
CVE-2024-38655 1 Ivanti 2 Connect Secure, Policy Secure 2025-06-27 7.2 High
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.1 and 9.1R18.9 allows a remote authenticated attacker with admin privileges to achieve remote code execution.