Lucene search
+L

8095 matches found

BDU FSTEC
BDU FSTEC
added 2022/09/28 12:00 a.m.15 views

The vulnerability of the `cv::BmpDecoder::readData` function in the `modules/imgcodecs/src/grfmt_bmp.cpp` file of the Computer Vision Library (OpenCV), a freely available computer vision and image processing library for general-purpose numerical algorithms, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the cv::BmpDecoder::readData function in the modules/imgcodecs/src/grfmtbmp.cpp file of the Computer Vision Library OpenSource Computer Vision Library – OpenCV involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain...

9.3CVSS6.9AI score0.02071EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:00 a.m.8 views

The vulnerability of the apr_time_exp*() and apr_os_exp_time*() functions in the APR library allows a hacker to gain access to confidential data, as well as to cause service interruptions.

The vulnerability of the aprtimeexp and aprosexptime functions in the APR library lies in the reading of data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...

7.1CVSS6.7AI score0.01749EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:00 a.m.11 views

The vulnerability in the checkout.c component of the Git method implementation in the Libgit2 C language allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the checkout.c component, which implements Git methods in the C language using Libgit2, is related to the use of a name with an incorrect reference. Exploiting this vulnerability allows an attacker who operates remotely to access confidential data, compromise its integrity, a...

10CVSS7.7AI score0.05087EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:00 a.m.9 views

The vulnerability of the ex_retab function in the src/indent.c file of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the exretab function in the src/indent.c file of the Vim text editor is related to the issue where the operation escapes the buffer boundaries into memory when :retab 0 is used. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise i...

9.3CVSS7.4AI score0.01541EPSS
SaveExploits1References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:00 a.m.16 views

The vulnerability of the PgBouncer connection pool program in PostgreSQL allows for unauthorized access to sensitive data. By not properly securing the SQL query structure, attackers can gain access to confidential information, compromise its integrity, and cause service failures.

The vulnerability of the PostgreSQL PgBouncer connection pool program lies in the fact that the data received from the initial request message is treated as already decoded data. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity,...

8.1CVSS7.5AI score0.01029EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:00 a.m.12 views

The vulnerability of the internal/dcraw_common.cpp component of the LibRaw image processing library, which involves reading data beyond the permissible buffer limits, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the internal/dcrawcommon.cpp component in the LibRaw image processing library relates to reading data beyond the permissible buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.8AI score0.01983EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:00 a.m.17 views

The vulnerability of the DBI interface module of the Perl database library allows attackers to gain access to confidential data and also cause service interruptions.

The vulnerability of the DBI interface module in Perl DBI is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...

6.2CVSS6.7AI score0.00488EPSS
SaveExploits1References11Affected Software4
OSV
OSV
added 2022/09/28 12:00 a.m.25 views

CVE-2022-39236 Matrix Javascript SDK improper beacon events can cause availability issues

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Starting with version 17.1.0-rc.1, improperly formed beacon events can disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the...

4.3CVSS7AI score
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:00 a.m.16 views

The vulnerability of the FillUniColor function in the utils.cpp component of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the FillUniColor function in the utils.cpp component of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, relates to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidenti...

9.3CVSS7.2AI score0.0197EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:00 a.m.8 views

The vulnerability of the gchar_cursor function in the misc1.c text editor Vim allows a hacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the gcharcursor function in the misc1.c file of the Vim text editor involves reading data beyond the allowable buffer limits. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

9.3CVSS7.4AI score0.01642EPSS
SaveExploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:00 a.m.15 views

The vulnerability of C and C++ garbage collectors using Boehm-Demers-Weiser GC allows a intruder to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of garbage collectors in C and C++ languages, such as Boehm-Demers-Weiser GC, involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and ev...

10CVSS7.7AI score0.0414EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:00 a.m.11 views

The vulnerabilities of the `fillin_rpath` and `decompose_rpath` functions in the GNU C Library allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the fillinrpath and decomposerpath functions in the GNU C Library’s system library is related to an unreliable search path. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.5AI score0.02698EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/09/26 12:00 a.m.9 views

The vulnerability in the src/undo.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the src/undo.c component of the Vim text editor lies in the fact that “undo” leaves the end of the visual area at the end of the line. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause service failur...

9.3CVSS6.6AI score0.01521EPSS
SaveExploits1References13Affected Software4
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 11:13 p.m.45 views

Security Bulletin: IBM PureData System For Operational Analytics A1791 is affected by an OSPF vulnerability (CVE-2013-0149)

Abstract The IBM PureData System for Operational Analytics A1791 includes network switches which are used in part for external network access. When configured to use the Open Shortest Path First OSPF protocol these switches are vulnerable and allow remote attackers to cause a denial of service...

5.8CVSS5.8AI score0.02476EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2022/09/23 3:15 p.m.11 views

CVE-2022-23144

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system...

9.1CVSS5.8AI score0.00697EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:00 a.m.8 views

The vulnerability of the inode_init_owner function in the fs/inode.c component of the Linux operating system allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the inodeinitowner function in the fs/inode.c component of the Linux operating system’s kernel is related to insecure privilege management. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.4AI score0.0101EPSS
SaveExploits3References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:00 a.m.12 views

The vulnerability in the kernel/sched/wait.c component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the kernel/sched/wait.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.7AI score0.00247EPSS
SaveExploits0References28Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:00 a.m.14 views

The vulnerability of the LD_LIBRARY_PATH environment variable allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the LDLIBRARYPATH environment variable in the GNU C Library is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

7CVSS7.4AI score0.01208EPSS
SaveExploits5References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:00 a.m.12 views

The vulnerability in the `src/libraw_cxx.cpp` component of the LibRaw image processing library allows a hacker to trigger a service failure.

The vulnerability of the src/librawcxx.cpp component in the LibRaw image processing library is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

7.1CVSS6.6AI score0.02039EPSS
SaveExploits1References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:00 a.m.13 views

The vulnerability of the `av_buffersrc_add_frame_flags` function in the `buffersrc` component of the FFmpeg multimedia library allows a attacker to cause a service failure.

The vulnerability of the avbuffersrcaddframeflags function in the buffersrc component of the FFmpeg multimedia library is related to improper memory release before deleting the last pointer. Exploiting this vulnerability allows an attacker to cause service failure remotely...

7.1CVSS6.7AI score0.00902EPSS
SaveExploits1References8Affected Software3
Rows per page
Query Builder