Lucene search
+L

8089 matches found

BDU FSTEC
BDU FSTEC
added 2024/09/30 12:00 a.m.12 views

The vulnerability in the module imgcodecs/src/grfmt_pxm.cpp of the OpenCV library, which is used for computer vision, image processing, and numerical algorithms of general purpose, open-source nature, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the modules/imgcodecs/src/grfmtpxm.cpp component in the computer vision, image processing, and general numerical algorithms library Open Source Computer Vision Library OpenCV is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain...

8.8CVSS6.8AI score0.03066EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/09/30 12:00 a.m.10 views

The vulnerability in the Google Chrome web browser, related to data type conversion errors, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Google Chrome web browser is related to errors in data type conversion. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a specially created HTML page...

9.3CVSS7AI score0.02259EPSS
SaveExploits1References11Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/09/30 12:00 a.m.19 views

The vulnerability of DHCP Snooping on Cisco IOS XE operating systems allows a intruder to trigger a service failure.

The vulnerability of DHCP Snooping in Cisco IOS XE operating systems is related to a logical priority error during the processing of IPv4 packets. Exploiting this vulnerability allows an attacker to cause service interruptions by sending specially crafted packets remotely...

8.6CVSS5.4AI score0.00575EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/30 12:00 a.m.12 views

The vulnerability of the exif_entry_get_value() function in the exif-entry.c component of the Libexif library for EXIF-file parsing allows a hacker to access confidential data and cause service interruptions. This vulnerability is related to reading beyond the allowed buffer size.

The vulnerability of the exifentrygetvalue function in the exif-entry.c component of the Libexif library for EXIF-file parsing involves reading data beyond the allowable buffer limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, as well as cause...

6.5CVSS6.9AI score0.01106EPSS
SaveExploits0References5Affected Software2
CNVD
CNVD
added 2024/09/29 12:00 a.m.59 views

Mattermost Resource-Consuming Vulnerability

Mattermost is an open source, self-hosted, enterprise-class chat platform that provides secure team communication and collaboration capabilities. A resource-consuming vulnerability exists in Mattermost. An attacker could exploit this vulnerability to cause a service down or denial of service...

6.5CVSS6.5AI score0.00577EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2024/09/27 8:40 a.m.30 views

CVE-2024-40094

A vulnerability was found in GraphQL Java, affecting versions prior to 21.5. This flaw allows an attacker to perform a denial of service DoS attack via introspection queries. The issue arises due to the improper handling of ExecutableNormalizedFields ENFs, which are not adequately considered duri...

7.5CVSS7AI score0.00943EPSS
SaveExploits2References9
Veracode
Veracode
added 2024/09/26 5:43 a.m.16 views

Denial Of Service (DoS)

org.springframework,spring-web is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of ETags from If-Match or If-None-Match request headers, allowing attackers to overwhelm the system and cause service disruption...

5.3CVSS5.2AI score0.00852EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:00 a.m.11 views

The vulnerability of the fromVirtualSet function in the /goform/setPortForward file of the Tenda wireless access point’s microprogramming software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromVirtualSet function in the /goform/setPortForward function of the Tenda wireless access point’s microprogramming system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to...

9CVSS8.5AI score0.01194EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/09/26 12:00 a.m.8 views

Mattermost 安全漏洞

Mattermost is an open source, self-hosted, enterprise-class chat platform that provides secure team communication and collaboration capabilities. A resource-consuming vulnerability exists in Mattermost. An attacker could exploit this vulnerability to cause a service down or denial of service...

6.5CVSS6.7AI score0.00577EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:00 a.m.10 views

The vulnerability of the formSetCfm function in the /goform/setcfm microprogramming software for the Tenda wireless access point allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetCfm function in the /goform/setcfm microprogramming system for the wireless access point Tenda is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause...

10CVSS8.4AI score0.01255EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:00 a.m.14 views

The vulnerability of the fromDhcpSetSer function in the /goform/DhcpSetSer file of the Tenda wireless access point’s microprogramming software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromDhcpSetSer function in the /goform/DhcpSetSer microprogramming system for the Tenda wireless access point is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or...

10CVSS8.5AI score0.01213EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2024/09/24 12:00 a.m.11 views

The vulnerability of the NFC component in the Linux operating system’s kernel, related to memory usage after deallocation, allows for a malfunction that can lead to service failure.

The vulnerability of the NFC component in the Linux operating system’s kernel relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00242EPSS
SaveExploits0References19Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/09/24 12:00 a.m.16 views

The vulnerability of the Microsoft SQL Server database management system, related to numerical truncation errors, allows an attacker to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Microsoft SQL Server database management system is related to numerical truncation errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

7.5CVSS5.6AI score0.0166EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/09/24 12:00 a.m.14 views

The vulnerability of the HCI_AMP component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the HCIAMP component in the Linux operating system is related to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.0031EPSS
SaveExploits0References20Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:00 a.m.13 views

The vulnerability of the read_samples() function in the voc.c component of the SoX sound processing software allows a hacker to cause a service failure.

The vulnerability of the readsamples function in the SoX sound processing component voc.c is related to the lack of checks for division by zero. Exploiting this vulnerability allows a attacker to cause a service failure using a specially created file...

5.5CVSS6.8AI score0.00447EPSS
SaveExploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:00 a.m.8 views

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

10CVSS8AI score0.00902EPSS
SaveExploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:00 a.m.8 views

The vulnerability of the web page rendering module in WebKitGTK and WPE WebKit, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Web page rendering module in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

10CVSS8AI score0.00902EPSS
SaveExploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:00 a.m.6 views

The vulnerability of the did_set_spelllang function in the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the didsetspelllang function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions...

7.8CVSS7.2AI score0.00655EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:00 a.m.8 views

The vulnerability of the split_cmdline() function in the Git distributed version control system allows a hacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the splitcmdline function in the distributed version of Git’s version control system is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause...

10CVSS7.6AI score0.03259EPSS
SaveExploits0References14Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:00 a.m.16 views

The vulnerability of the buffer.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the buffer.c component of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

7.8CVSS7.2AI score0.00373EPSS
SaveExploits0References6Affected Software3
Rows per page
Query Builder