Lucene search
+L

9305 matches found

BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.21 views

The vulnerability of Google Chrome’s ServiceWorker script allows a perpetrator to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of Google Chrome’s ServiceWorker script is related to a processing error in the Cross-Origin Resource Sharing CORS policy. Exploiting this vulnerability allows an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures...

10CVSS5.5AI score0.01246EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.12 views

The vulnerability of the calculate_gain() function in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a intruder to compromise data integrity, gain unauthorized access to protected information, and cause service failure.

The vulnerability of the calculategain function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to the escape from memory buffers. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

7.8CVSS5.5AI score0.0145EPSS
SaveExploits1References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.8 views

The vulnerability of the faad_resetbits() function in the software suite for working with audio files, Freeware Advanced Audio Decoder 2 (FAAD2), allows a perpetrator to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the faadresetbits function in the software suite for working with audio files, Freeware Advanced Audio Decoder 2 FAAD2, is related to buffer overflows. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected...

7.8CVSS5.8AI score0.01316EPSS
SaveExploits0References6Affected Software2
CNVD
CNVD
added 2019/10/16 12:0 a.m.5 views

Unspecified Vulnerability in Oracle Java SE and Java SE Embedded (CNVD-2019-37219)

Oracle Java SE and Oracle Java SE Embedded are both products of Oracle Corporation.Oracle Java SE is a Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle Java SE Embedded is a Java platform that targets Java...

5.9CVSS6.5AI score0.02638EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/16 12:0 a.m.6 views

Unspecified Vulnerability in Oracle Fusion Middleware Outside In Technology (CNVD-2019-37234)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. An...

7.5CVSS6.6AI score0.01252EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.10 views

The vulnerabilities of browsers Firefox, Firefox ESR, and the email client Thunderbird involve memory usage after it is freed. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerabilities of Firefox browsers, Firefox ESR, and the Thunderbird email client are related to the use of a certain data structure after it is freed upon deletion of the list manager currently in use. Exploiting these vulnerabilities allows an attacker who operates remotely to gain access ...

10CVSS5.5AI score0.01603EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.14 views

The vulnerability of Blink’s web page display mechanism in the Google Chrome web browser allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of Blink’s web page rendering mechanism in the Google Chrome browser is related to a processing error in the Cross-Origin Resource Sharing CORS policy. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected...

10CVSS5.5AI score0.01872EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.7 views

The vulnerability of the software for implementing the hypertext environment MediaWiki, related to deficiencies in access control, allows a violator to compromise the integrity of the data.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to improper access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the data...

7.5CVSS5.5AI score0.01362EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.12 views

The vulnerability of the DemuxInit() function in the VideoLAN VLC media player software allows a hacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the DemuxInit function in the VideoLAN VLC media player software is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and even cause service failures by usin...

7.8CVSS5.9AI score0.01484EPSS
SaveExploits0References7Affected Software4
CNVD
CNVD
added 2019/10/16 12:0 a.m.6 views

Unspecified Vulnerability in Oracle Hospitality Reporting and Analytics (CNVD-2019-36665)

Oracle Hospitality Reporting and Analytics is a web-based application that centralizes point-of-sale POS data, provides operational and analytical insights into business operations, and improves efficiencies by delivering information to all roles within an organization. An unspecified vulnerabili...

8.1CVSS6.5AI score0.01366EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/16 12:0 a.m.9 views

Unspecified Vulnerability in Oracle E-Business Suite Content Manager

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions.Content Manager is one of the...

5.8CVSS6.6AI score0.01138EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.16 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to a read-off error beyond the allocated memory buffer. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

10CVSS5.5AI score0.01346EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.10 views

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers is related to a corruption that occurs during integer overflow. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

10CVSS5.6AI score0.01453EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.11 views

The vulnerability of Google Chrome, related to errors in data validation within developer tools, allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of Google Chrome is related to errors in data validation when using developer tools. Exploiting this vulnerability can allow attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures...

7.3CVSS5.5AI score0.0039EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.9 views

The vulnerability of the calculate_gain function in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a intruder to compromise data integrity, gain unauthorized access to protected information, and cause service failure.

The vulnerability of the calculategain function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to an error that causes stack overflow. Exploiting this vulnerability can allow attackers to compromise data integrity, gain unauthorized access to protected information, and cause service...

7.8CVSS5.6AI score0.01324EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.10 views

The vulnerability of Thunderbird email clients, as well as browsers Firefox and Firefox ESR, is related to a buffer overflow exploit that allows an attacker to compromise data integrity.

The vulnerability of the Thunderbird email client, as well as browsers Firefox and Firefox ESR, is related to a escape character handling error "^". Exploiting this vulnerability could allow an attacker to compromise data integrity remotely...

5.3CVSS5.5AI score0.02131EPSS
SaveExploits1References15Affected Software9
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.12 views

The vulnerability of the automation tools for deploying and managing applications in Docker-enabled environments relates to errors in code generation. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the automation tool for deploying and managing applications in Docker-enabled environments is related to errors in code generation during dynamic library loading. Exploiting this vulnerability can allow a malicious actor to compromise data integrity, gain unauthorized access ...

10CVSS7.3AI score0.18828EPSS
SaveExploits3References5Affected Software3
CNVD
CNVD
added 2019/10/16 12:0 a.m.6 views

Unspecified Vulnerability in Oracle E-Business Suite Workflow

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. Workflow E-Business Suite is one...

4.3CVSS6.6AI score0.01218EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/16 12:0 a.m.5 views

Unspecified Vulnerability in Oracle Database Server Core RDBMS Component (CNVD-2019-37203)

Oracle Database Server is a set of relational database management system of Oracle Oracle. The database management system provides data management, distributed processing and other functions.Core RDBMS is one of the relational database core components. An unspecified vulnerability exists in the...

3.9CVSS6.5AI score0.00396EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.9 views

The vulnerability of the Special:ChangeEmail function in the software for implementing the hypertext environment of MediaWiki allows a violator to compromise the integrity of the data.

The vulnerability of the Special:ChangeEmail function in the MediaWiki software, which is used for implementing hypertext environments, is related to lack of access control. This allows for the replacement of the email address of the sender. Exploiting this vulnerability could enable a malicious...

5.3CVSS5.5AI score0.01263EPSS
SaveExploits0References7Affected Software3
Rows per page
Query Builder