Lucene search
K

5836 matches found

BDU FSTEC
BDU FSTEC
added 2024/02/02 12:0 a.m.2 views

The vulnerability of Microsoft Edge browser, related to insufficient validation of input data, allows attackers to trigger a service failure.

The vulnerability of Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.006EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/02 12:0 a.m.1 views

The vulnerability of Microsoft Edge browser, related to insufficient validation of input data, allows attackers to trigger a service failure.

The vulnerability of Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.0072EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2024/01/30 12:0 a.m.6 views

Tenda AC10U fromAddressNat function stack buffer overflow vulnerability

Tenda AC10U is a wireless router from Tenda China. A buffer overflow vulnerability exists in Tenda AC10U version 15.03.06.49multiTDE01, which is caused by the Entrys/mitInterface/page parameter of the fromAddressNat function failing to correctly validate the length of the input data, and can be...

9.8CVSS8.1AI score0.00843EPSS
Exploits1References1
CNVD
CNVD
added 2024/01/30 12:0 a.m.14 views

Tenda AC10U fromDhcpListClient Function Stack Buffer Overflow Vulnerability

The Tenda AC10 is a wireless router from the Chinese company Tenda. The Tenda AC10U fromDhcpListClient function suffers from a stack buffer overflow vulnerability, which arises from the page/listN parameter of the fromDhcpListClient function failing to properly validate the length of the input...

9.8CVSS8.1AI score0.01057EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2024/01/30 12:0 a.m.3 views

The vulnerability in Intel NUC’s built-in software arises from insufficient checking of input data, allowing attackers to exploit their privileges.

The vulnerability of Intel NUC’s built-in software is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.5CVSS7.2AI score0.00161EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/01/30 12:0 a.m.34 views

FreeBSD : qt6-webengine -- Multiple vulnerabilities (a25b323a-bed9-11ee-bdd6-4ccc6adda413)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a25b323a-bed9-11ee-bdd6-4ccc6adda413 advisory. - Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker...

9.6CVSS8.1AI score0.1963EPSS
Exploits4References17
BDU FSTEC
BDU FSTEC
added 2024/01/24 12:0 a.m.3 views

The vulnerability of Synology RT6600ax router microprogramming software arises from insufficient validation of input data, allowing a hacker to execute arbitrary code.

The vulnerability of Synology RT6600ax router microprogramming software exists due to insufficient verification of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.5CVSS7.7AI score0.00663EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2024/01/23 12:0 a.m.2 views

The vulnerability of the AIX operating system, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the AIX operating system is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS5.9AI score0.00234EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/01/22 12:0 a.m.4 views

The vulnerability of the Filesystem component in Oracle Solaris allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Filesystem component in Oracle Solaris is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

3.8CVSS6.3AI score0.00194EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:0 a.m.2 views

The vulnerability of the Libarchive library in the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Libarchive library in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.3CVSS6.9AI score0.03154EPSS
Exploits0References3
NVD
NVD
added 2024/01/17 5:15 p.m.12 views

CVE-2024-20272

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system and execute commands on the underlying operating system. This vulnerability is due to a lack of authentication in a...

9.8CVSS9.1AI score0.01604EPSS
Exploits0References1
CVE
CVE
added 2024/01/17 4:54 p.m.160 views

CVE-2024-20272

CVE-2024-20272 affects Cisco Unity Connection. An unauthenticated attacker can exploit a lack of authentication in a specific API and improper validation to upload arbitrary files, potentially storing malicious files, executing commands on the underlying OS, and elevating privileges to root. Cisc...

9.8CVSS10AI score0.01604EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/16 3:52 p.m.27 views

CVE-2022-3604 Contact Form Entries < 1.3.0 - CSV Injection

The Contact Form Entries WordPress plugin before 1.3.0 does not validate data when its output in a CSV file, which could lead to CSV injection...

8AI score0.00428EPSS
Exploits2References1
OSV
OSV
added 2024/01/16 7:30 a.m.12 views

OPENSUSE-SU-2024:0020-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 120.0.6099.216 boo1217839, boo1218048, boo1218302, boo1218533, boo1218719 CVE-2024-0333: Insufficient data validation in Extensions CVE-2024-0222: Use after free in ANGLE CVE-2024-0223: Heap buffer overflow in ANGLE CVE-2024-0224: Us...

8.8CVSS9.7AI score0.10715EPSS
Exploits3References24
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:0 a.m.26 views

Debian dsa-5598 : chromium - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5598 advisory. - Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious...

5.3CVSS7.2AI score0.00429EPSS
Exploits0References5
Veracode
Veracode
added 2024/01/13 6:54 a.m.32 views

Improper Input Validation

chromium is vulnerable to Improper Input Validation. The vulnerability is due to Insufficient data validation in Extensions. This flaw allowed attackers in a privileged network position to install malicious extensions through a specially crafted HTML page...

5.3CVSS6.6AI score0.00429EPSS
Exploits0References5Affected Software3
Tenable Nessus
Tenable Nessus
added 2024/01/13 12:0 a.m.19 views

Fedora 38 : chromium (2024-237107cece)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-237107cece advisory. update to 120.0.6099.216 - High CVE-2024-0333: Insufficient data validation in Extensions Tenable has extracted the preceding description block directly from...

5.3CVSS7.3AI score0.00429EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2024/01/12 2:44 a.m.1 views

SUSE CVE-2024-0333

Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious extension via a crafted HTML page. Chromium security severity: High...

5.3CVSS8.5AI score0.00429EPSS
Exploits0References4
CNVD
CNVD
added 2024/01/12 12:0 a.m.5 views

Totolink NR1800X Buffer Overflow Vulnerability

TOTOLINK NR1800X is an outstanding 5G NR indoor Wi-Fi and SIP CPE from China's TOTOLINK. designed to provide fast and easy deployment of NR fixed data services in homes and offices. The Totolink NR1800X version 9.1.0u.6279B20210910 suffers from a buffer overflow vulnerability, which originates fr...

10CVSS8.4AI score0.01499EPSS
Exploits1References1
CNVD
CNVD
added 2024/01/12 12:0 a.m.3 views

Tenda A18 Buffer Overflow Vulnerability

Tenda A18 is an AC1200 dual-band Wi-Fi repeater from China's Tenda. A buffer overflow vulnerability exists in Tenda A18 version v15.13.07.09, which originates from the devName parameter in the formSetDeviceName function failing to correctly validate the length of the input data, and can be...

9.8CVSS8.3AI score0.00701EPSS
Exploits1References1
Rows per page
Query Builder