Lucene search
+L

9554 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/01 12:00 a.m.17 views

The vulnerability of the HTTP library for Rust Hyper, related to shortcomings in HTTP request processing, allows attackers to compromise data integrity.

The vulnerability of the HTTP library for Rust Hyper relates to the improper handling of requests with a “+” prefix in the Content-Length header. Exploiting this vulnerability allows an attacker to compromise data integrity...

5.3CVSS5.9AI score0.00886EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:00 a.m.10 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows attackers to compromise data integrity.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

6.1CVSS7AI score0.01352EPSS
SaveExploits0References12Affected Software12
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:00 a.m.13 views

The vulnerability of the DumpRawUIConfig function in the odf_dump.c component of the GPAC multimedia platform allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the DumpRawUIConfig function in the odfdump.c component of the GPAC multimedia platform is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS7.5AI score0.01052EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:00 a.m.14 views

The vulnerability of the XML DOM implementation lies in the lack of mechanisms for encoding or escaping output data, allowing attackers to compromise the integrity of the data.

The vulnerability of the XML DOM implementation is related to improper filtering of special characters. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

5.3CVSS6.3AI score0.01347EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:00 a.m.18 views

The vulnerability of the Widget plugin and the Undo feature of the CKEditor WYSIWYG editor allows attackers to compromise data integrity.

The vulnerability of the Widget plugin and the Undo feature of the CKEditor WYSIWYG editor is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

5.4CVSS6.4AI score0.01192EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:00 a.m.9 views

The vulnerability in the `library/std/src/net/parser.rs` component of the Rust programming language allows a perpetrator to compromise the integrity of data and also cause service failures.

The vulnerability in the library/std/src/net/parser.rs component of the Rust programming language is related to incorrect handling of zeros at the beginning of an IP address. Exploiting this vulnerability allows a remote attacker to compromise data integrity and cause service failures...

9.4CVSS7.8AI score0.02623EPSS
SaveExploits1References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:00 a.m.11 views

The vulnerability of the oidc_validate_redirect_url() function in the authentication and authorization module for the Apache 2.x HTTP server Mod_auth_openidc allows a perpetrator to access sensitive data and compromise its integrity.

The vulnerability of the oidcvalidateredirecturl function in the authentication and authorization module for the Apache 2.x HTTP server Modauthopenidc is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to gain access to sensitive data and compromise...

6.1CVSS6.6AI score0.02364EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:00 a.m.14 views

The vulnerability of the x509_crt_verify_name function in implementations of TLS and SSL protocols allows a attacker to compromise the integrity of data.

The vulnerability of the x509crtverifyname function in TLS and SSL implementations is related to incorrect comparison of different data types. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...

5.9CVSS6.2AI score0.00832EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:00 a.m.11 views

The vulnerability of the Gradle plugin and script for the automatic build system Gradle allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Gradle plugin and script in the automatic build system Gradle is related to the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

8.5CVSS7.3AI score0.02709EPSS
SaveExploits1References6Affected Software2
Tenable Nessus
Tenable Nessus
added 2022/03/31 12:00 a.m.42 views

SUSE SLES12 Security Update : python3 (SUSE-SU-2022:1044-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1044-1 advisory. - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue...

5.7CVSS7.1AI score0.01687EPSS
SaveExploits2References4
BDU FSTEC
BDU FSTEC
added 2022/03/30 12:00 a.m.13 views

Vulnerability of the Server component: The compilation of the MySQL Server database management system allows attackers to compromise the integrity and accessibility of protected information.

Vulnerability of the Server component: Compiling the MySQL Server database management system is vulnerable due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of protected information...

7.5CVSS6.4AI score0.01257EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/30 12:00 a.m.12 views

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain read access to data and compromise its integrity.

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain read access to data and compromise its integri...

6.1CVSS6.8AI score0.00825EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/30 12:00 a.m.8 views

Vulnerability of the MySQL Server component: The DML mechanism of the MySQL Database Management System allows attackers to compromise data integrity or cause service interruptions.

The vulnerability of the MySQL Server component exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise data integrity or cause service failures...

7.5CVSS6.4AI score0.01604EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/03/29 8:15 p.m.11 views

CVE-2022-21821

NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an attack may lead to remote code...

7.8CVSS7.8AI score0.02089EPSS
SaveExploits0References2
OSV
OSV
added 2022/03/29 8:15 p.m.4 views

DEBIAN-CVE-2022-21821

NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an attack may lead to remote code...

7.8CVSS8.3AI score0.02089EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/29 8:15 p.m.9 views

CVE-2022-21821

NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an attack may lead to remote code...

7.8CVSS7.7AI score
SaveExploits0References1
Prion
Prion
added 2022/03/29 8:15 p.m.23 views

Integer overflow

NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an attack may lead to remote code...

6.8CVSS8AI score0.02089EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2022/03/29 8:15 p.m.30 views

CVE-2022-21821

NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an attack may lead to remote code...

7.8CVSS7.2AI score0.02089EPSS
SaveExploits0References2
OSV
OSV
added 2022/03/29 8:15 p.m.6 views

UBUNTU-CVE-2022-21821

NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an attack may lead to remote code...

7.8CVSS6.5AI score0.02089EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/03/29 8:05 p.m.34 views

CVE-2022-21821

NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an attack may lead to remote code...

7.8CVSS8.2AI score0.02089EPSS
SaveExploits0References1
Rows per page
Query Builder