Lucene search
+L

9257 matches found

BDU FSTEC
BDU FSTEC
added 2017/10/11 12:0 a.m.8 views

The vulnerability of the Microprogrammed Routing Software of the Axesstel MU553S router lies in the use of the default standard password for the administrator account, allowing attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the microprogrammed routing software Axesstel MU553S is related to the default use of a standard password for the administrator account. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

10CVSS7.8AI score0.01405EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2017/10/11 12:0 a.m.14 views

The vulnerability of the HTTP/2 module of the Apache Traffic Server allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the HTTP/2 module in the Apache Traffic Server exists due to improper handling of HTTP/2 requests. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of data...

10CVSS7.8AI score0.02411EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2017/10/03 12:0 a.m.8 views

PT-2017-3586 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.6 Description: A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can...

10CVSS7.4AI score0.84172EPSS
SaveExploits41References117
CNVD
CNVD
added 2017/09/22 12:0 a.m.5 views

Oracle Siebel Core CRM Remote Vulnerability

Oracle Siebel CRM is a set of customer relationship management solutions from Oracle USA. The solution includes modules for sales management, marketing management, customer service systems, call centers, etc. Siebel Core CRM component is one of the core components. A security vulnerability exists...

6.1CVSS6.7AI score0.0142EPSS
SaveExploits0References1
OSV
OSV
added 2017/09/18 9:40 a.m.19 views

SUSE-SU-2017:2518-1 Security update for php5

This update for php5 fixes on issues. This security issue was fixed: - CVE-2017-12933: The finishnesteddata function in ext/standard/varunserializer.re was prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue could have had an unspecified impact on the...

9.8CVSS9.6AI score0.0694EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/13 12:0 a.m.12 views

A vulnerability exists in the ext/standard/var_unserializer.re PHP hypertext processor, which allows an attacker to potentially compromise the integrity of data.

The vulnerability in ext/standard/varunserializer.re of the PHP hypertext processor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to potentially compromise the integrity of PHP data...

7.5CVSS7.7AI score0.0742EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/09/13 12:0 a.m.9 views

The vulnerability of the `finish_nested_data` function in the PHP interpreter allows a attacker to potentially compromise the integrity of data.

The vulnerability of the finishnesteddata function in the PHP interpreter’s ext/standard/varunserializer.re module arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to potentially compromise the integrity of PHP dat...

7.5CVSS7.2AI score0.0694EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
added 2017/09/08 12:0 a.m.6 views

Cisco Emergency Responder SQL Injection Vulnerability

Cisco Emergency Responder ER is the United States Cisco Cisco a set of IP communications systems in the emergency call software. The software provides real-time location tracking database and caller location and other features. A SQL injection vulnerability exists in the SQL database interface in...

5.5CVSS6.1AI score0.00968EPSS
SaveExploits0References1
Prion
Prion
added 2017/09/07 9:29 p.m.19 views

Sql injection

A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass protection filters. An attacker...

5.5CVSS6AI score0.00968EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.10 views

The vulnerability of the system call in the TrustZone of the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone-based system call in the Android CAF-release operating system is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.8AI score0.00836EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.8 views

The vulnerability of the Android operating system in the CAF repository exists due to errors in processing QMI messages, allowing a perpetrator to compromise privacy, integrity, and accessibility.

The vulnerability of the Android operating system from the CAF repository is related to buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of QMI messages during processing...

10CVSS8.3AI score0.00904EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.10 views

The vulnerability of the Android CAF-release operating system’s supervisor allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android CAF-release operating system’s supervisor is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.8AI score0.00877EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.12 views

The vulnerability of the Inter-RAT process in the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Inter-RAT process in the Android CAF-release operating system is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8.3AI score0.01056EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.9 views

The vulnerability of the Android CAF-release operating system, related to access control deficiencies, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android CAF-release operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information by sending UE identifier IMEI or IMEISV to the...

10CVSS7.7AI score0.0094EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.14 views

The vulnerability of the procedure related to the remote UIM client, the Android CAF-release operating system, allows a perpetrator to compromise the privacy, integrity, and accessibility of protected information.

The vulnerability of the process related to the remote UIM client in Android CAF-release builds is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8.3AI score0.01056EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.14 views

The vulnerability of the system call in the TrustZone of the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone-based system call in the Android CAF-release operating system is related to pointer swapping errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.8AI score0.00836EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.10 views

The vulnerability of the system call in the TrustZone of the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone system call in the Android CAF-release operating system arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

10CVSS8.2AI score0.00836EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.14 views

The vulnerability of the Keymaster component of the Android operating system from the CAF repository allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Keymaster component of the Android operating system from the CAF repository is related to the lack of checks on buffer size. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8.1AI score0.00836EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.12 views

The vulnerability in the IMS multimedia message transmission subsystem of the RCS standard in the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the IMS multimedia message transmission subsystem of the RCS standard in the Android operating system’s CAF builds is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and...

10CVSS7.8AI score0.00937EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.8 views

The vulnerability of the Android operating system from the CAF repository exists due to deficiencies in access control to the file system. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system Android from the CAF repository is related to deficiencies in access control to the file system. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

10CVSS7.7AI score0.00976EPSS
SaveExploits0References2
Rows per page
Query Builder