Search vulnerabilities

Results 45

Export CSV
CVE-2024-52057

Potential arbitrary SQL query execution in Queuing Service while parsing malicious remote commands or configuration files

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RTI Connext Professional (Queuing Service) allows SQL Injection.This issue affects Connext Professional: from 7.0.0 before 7.3.0, from 6.1.0 before 6.1.2.17, from 6.0.0 before 6.0.*, from 5.2.0 before 5.3.*.

CVSS 4.0 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Rti
CVE-2021-38487

Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro

RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure.

CVSS 4.0 · 8.8 High EPSS 3.4% KEV · Not listed
Vendors
Rti
CVE-2021-38427

RTI Connext DDS Professional and Connext DDS Secure Stack-based Buffer Overflow

RTI Connext DDS Professional and Connext DDS Secure Versions 4.2.x to 6.1.0 are vulnerable to a stack-based buffer overflow, which may allow a local attacker to execute arbitrary code.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Rti
CVE-2021-38433

RTI Connext DDS Professional and Connext DDS Secure Stack-based Buffer Overflow

RTI Connext DDS Professional and Connext DDS Secure Versions 4.2x to 6.1.0 vulnerable to a stack-based buffer overflow, which may allow a local attacker to execute arbitrary code.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Rti
CVE-2021-38435

RTI Connext DDS Professional and Connext DDS Secure Incorrect Calculation of Buffer Size

RTI Connext DDS Professional and Connext DDS Secure Versions 4.2x to 6.1.0 not correctly calculate the size when allocating the buffer, which may result in a buffer overflow.

CVSS 3.1 · 6.6 Medium EPSS 1.4% KEV · Not listed
Vendors
Rti