Lucene search
+L

8080 matches found

BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.11 views

The vulnerability of the qi_inst_state_free component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the qiinststatefree component in the Virtuoso-OpenSource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially...

7.8CVSS7.3AI score0.00913EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.17 views

The vulnerability of the sqlgvec_upd component in the Virtuoso-OpenSource web application development platform allows a attacker to cause a service failure.

The vulnerability of the sqlgvecupd component in the Virtuoso-OpenSource web application development platform is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

7.8CVSS7.2AI score0.00913EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.13 views

The vulnerability of the dfe_inx_op_col_def_table component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the dfeinxopcoldeftable component in the Virtuoso-OpenSource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending...

7.8CVSS7.3AI score0.00749EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.13 views

The vulnerability of the `dc_elt_size` component in the virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the dceltsize component in the virtuoso-opensource web application development platform is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

7.8CVSS7.2AI score0.00572EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.12 views

The vulnerability of the `box_deserialize_string` component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the boxdeserializestring component in the Virtuoso-OpenSource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially...

7.8CVSS7.3AI score0.00913EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.15 views

The vulnerability of the sqlexp component in the Virtuoso-OpenSource web application development platform allows a hacker to trigger a service failure.

The vulnerability of the sqlexp component in the virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability allows an attacker to cause service interruptions by sending specially crafted SQL...

7.8CVSS7.3AI score0.00674EPSS
SaveExploits1References4Affected Software2
RedhatCVE
RedhatCVE
added 2025/03/29 1:21 a.m.15 views

CVE-2025-30355

Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild and has been fixed in Synapse v1.127.1. No known...

7.5CVSS7.1AI score0.01181EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/03/27 6:02 p.m.3 views

Improper Input Validation

Overview matrix-synapse is an ecosystem for open federated Instant Messaging and VoIP. Affected versions of this package are vulnerable to Improper Input Validation. A malicious server can disrupt the normal operation and prevent the application from federating with other servers by crafting even...

7.5CVSS6.9AI score0.01181EPSS
SaveExploits0References2
Veracode
Veracode
added 2025/03/27 6:16 a.m.8 views

Origin Validation Error

Prefect is vulnerable to Origin Validation Error. The vulnerability is due to improper access control due to unauthorized domains being allowed to access sensitive data, leading to potential data leaks, loss of confidentiality, service disruption, and data integrity risks...

7.6CVSS6.9AI score0.00176EPSS
SaveExploits0References7Affected Software1
NVD
NVD
added 2025/03/27 1:15 a.m.19 views

CVE-2025-30355

Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild and has been fixed in Synapse v1.127.1. No known...

7.5CVSS0.01181EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:00 a.m.20 views

The vulnerabilities of the iommu/vt-d components of the Linux operating system’s kernel, which allow a hacker to cause a service failure

The vulnerability of the iommu/vt-d components of the Linux operating system’s kernel is related to improper validation of input data in the function domaincontextclearonecb within drivers/iommu/intel/iommu.c. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00245EPSS
SaveExploits0References17Affected Software9
CNVD
CNVD
added 2025/03/27 12:00 a.m.13 views

GPT Academic Resource Management Error Vulnerability

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a Resource Management Error vulnerability that stems from an excessive number of characters at the end of a multi-part boundary during a file upload that caus...

7.5CVSS7.1AI score0.00613EPSS
SaveExploits1References1
Packet Storm
Packet Storm
added 2025/03/27 12:00 a.m.263 views

Geovision GV-ASManager 6.1.10 Cross Site Request Forgery

Geovision GV-ASManager versions 6.1.10 and below suffer from a cross site request forgery vulnerability. CVE-2024-56901 CVE-2024-56901 - A Cross-Site Request Forgery CSRF vulnerability in Geovision GV-ASManager web application with the version 6.1.1.0 or less that allows attackers to arbitrarily...

8.8CVSS6.7AI score0.23409EPSS
SaveExploits5
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:00 a.m.18 views

The vulnerability of Tenda AC6 router microprogramming software, related to the execution of operations outside the buffer in memory, allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of Tenda AC6 router microprogramming software is related to the execution of an operation beyond the buffer boundaries in memory when processing the wpapskcrypto parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...

9CVSS8.6AI score0.00994EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:00 a.m.12 views

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to gain unauthorized access to protected information and cause service failures.

The vulnerability of the Core component in Oracle VM VirtualBox relates to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and cause service failures...

7.3CVSS7.7AI score0.00288EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:00 a.m.11 views

Vulnerability of RDMA/cxgb4 components of the Linux operating system’s kernel, allowing a hacker to cause a service failure

The vulnerability of RDMA/cxgb4 components of the Linux operating system is related to the assignment of the NULL pointer in the actestablish and actopenrpl functions. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00567EPSS
SaveExploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:00 a.m.15 views

The vulnerability of the calc_pll() function in the drivers/media/i2c/ar0521.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the calcpll function in the drivers/media/i2c/ar0521.c module of the Linux operating system is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00227EPSS
SaveExploits0References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:00 a.m.13 views

The vulnerability of the dnspython tool for Python, related to improper validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the dnspython tool for Python is related to insufficient validation of data entered by users. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7CVSS6.8AI score0.01857EPSS
SaveExploits1References15Affected Software21
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:00 a.m.10 views

The vulnerability of the xhci kernel component in the Linux operating system allows a hacker to increase their privileges within the system.

The vulnerability of the xhci kernel component in Linux operating systems is related to errors that occur after release. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.1CVSS6.9AI score0.00292EPSS
SaveExploits0References18Affected Software10
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:00 a.m.18 views

The vulnerability of the __ocfs2_change_file_space() function in the ocfs2 component of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ocfs2changefilespace function in the ocfs2 component of the Linux operating system is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00197EPSS
SaveExploits0References18Affected Software6
Rows per page
Query Builder