Lucene search
+L

8092 matches found

BDU FSTEC
BDU FSTEC
added 2022/07/20 12:00 a.m.13 views

The vulnerability of the Cachuri module in the Microsoft Internet Information Services (IIS) network services for Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the Cachuri module in the Microsoft Internet Information Services IIS network services for Windows operating systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.4AI score0.32336EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:00 a.m.10 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.8CVSS6.3AI score0.0164EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:00 a.m.9 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows attackers to modify, add, or delete data, or to cause service interruptions.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to modify, add, or delete data, or to cause service interruptions...

7.5CVSS6.4AI score0.01467EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2022/07/20 12:00 a.m.5 views

LIBTIRPC 安全漏洞

LIBTIRPC is a package used on Linux systems that contains libraries supporting programs that use the Remote Procedure Call RPC API. A security vulnerability exists in versions of LIBTIRPC prior to 1.3.3rc1, which stems from the fact that a remote attacker can exhaust the file descriptors of a fil...

7.5CVSS7.6AI score0.02606EPSS
SaveExploits0References17
CNNVD
CNNVD
added 2022/07/20 12:00 a.m.8 views

Hicos Citizen Certificate Client-side Component 资源管理错误漏洞

Hicos Citizen Certificate Client-side Component is a citizen certificate client-side component. A security vulnerability exists in the Hicos Citizen Certificate Client-side Component, which can be exploited by an unauthenticated attacker to corrupt memory and execute arbitrary code, manipulate...

6.8CVSS7AI score0.0023EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:00 a.m.10 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows attackers to modify, add, or delete data, or to cause service interruptions.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to modify, add, or delete data, or cause service interruptions...

7.5CVSS6.4AI score0.015EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/07/19 10:15 p.m.9 views

CVE-2022-21563

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems component: Core. The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to...

3.4CVSS6.6AI score0.00219EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/07/19 10:15 p.m.9 views

CVE-2022-21542

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.6.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

7.4CVSS7.3AI score0.0064EPSS
SaveExploits0References1
OSV
OSV
added 2022/07/19 10:15 p.m.4 views

UBUNTU-CVE-2022-21538

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 8.0.29 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

3.1CVSS6.5AI score0.00753EPSS
SaveExploits0References4
ThreatPost
ThreatPost
added 2022/07/19 3:33 p.m.49 views

Authentication Risks Discovered in Okta Platform

Researchers at Authomize have discovered four “high impact” security risks in the identity and access management IAM platform Okta, according to a Tuesday report. The risks include cleartext password leakage via SCIM – the System for Cross-domain Identity Management – sharing of passwords and oth...

7.4AI score
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/19 12:00 a.m.9 views

Oracle ZFS Storage Appliance 输入验证错误漏洞

Oracle ZFS Storage Appliance is a storage appliance that supports flash memory, petabyte file storage and built-in Oracle database from Oracle USA. A security vulnerability exists in the Oracle ZFS Storage Appliance that could be exploited by an attacker to cause unauthorized update, insertion, o...

3.4CVSS5.6AI score0.00219EPSS
SaveExploits0References3
The Hacker News
The Hacker News
added 2022/07/18 1:13 p.m.27 views

Mind the Gap – How to Ensure Your Vulnerability Detection Methods are up to Scratch — The Hacker News

With global cybercrime costs expected to reach $10.5 trillion annually by 2025, it comes as little surprise that the risk of attack is companies' biggest concern globally. To help businesses uncover and fix the vulnerabilities and misconfigurations affecting their systems, there is an overabundan...

0.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/07/18 12:00 a.m.11 views

The vulnerability in the API for 3D graphics in WebGL browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to induce a service failure.

The vulnerability of the API for 3D graphics in WebGL browsers such as Firefox, Firefox ESR, and the email client Thunderbird lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions throug...

7.6CVSS7.7AI score0.00814EPSS
SaveExploits0References17Affected Software11
BDU FSTEC
BDU FSTEC
added 2022/07/15 12:00 a.m.15 views

The vulnerabilities of the microprogramming software for the OPC UA Modicon Communication Module (BMENUA0100) and the X80 advanced RTU Communication Module (BMENOR2200H) allow attackers to cause service interruptions.

The vulnerability of the microprogramming software for the OPC UA Modicon Communication Module BMENUA0100 and the X80 advanced RTU Communication Module BMENOR2200H is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely ...

5.9CVSS7.2AI score0.00273EPSS
SaveExploits0References2
Code423n4
Code423n4
added 2022/07/15 12:00 a.m.14 views

Accidentally cancel order

Lines of code Vulnerability details Accidentally cancel order Impact Some market maker's limit order might be accidentally cancelled, and has to be resubmitted again. If the user did not do this on purpose, without knowing the fact that the order has been cancelled, it may lead to unexpected...

6.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/07/15 12:00 a.m.11 views

The vulnerabilities of the microprogramming software for the OPC UA Modicon Communication Module (BMENUA0100) and the X80 advanced RTU Communication Module (BMENOR2200H) allow attackers to cause service interruptions.

The vulnerability of the microprogramming software for the OPC UA Modicon Communication Module BMENUA0100 and the X80 advanced RTU Communication Module BMENOR2200H is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.2AI score0.00746EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/15 12:00 a.m.10 views

The vulnerabilities of the microprogramming software for the OPC UA Modicon Communication Module (BMENUA0100) and the X80 advanced RTU Communication Module (BMENOR2200H) allow attackers to cause service interruptions.

The vulnerability of the microprogramming software for the OPC UA Modicon Communication Module BMENUA0100 and the X80 advanced RTU Communication Module BMENOR2200H is related to JSON content processing errors. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.8CVSS7.2AI score0.00849EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/07/15 12:00 a.m.13 views

The vulnerability of the smtcfb_read() function in the Linux operating system allows a hacker to disclose sensitive information and cause service interruptions.

The vulnerability of the smtcfbread function in the Linux operating system relates to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information and cause service failures...

6.1CVSS6.7AI score0.00221EPSS
SaveExploits0References17Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/07/15 12:00 a.m.11 views

The vulnerabilities of the microprogramming software for the OPC UA Modicon Communication Module (BMENUA0100) and the X80 advanced RTU Communication Module (BMENOR2200H) allow attackers to cause service interruptions.

The vulnerability of the microprogramming software for the OPC UA Modicon Communication Module BMENUA0100 and the X80 advanced RTU Communication Module BMENOR2200H is related to incorrect external control via name or file. Exploiting this vulnerability can allow an attacker to cause service...

7.8CVSS5.9AI score0.00539EPSS
SaveExploits0References2
OSV
OSV
added 2022/07/13 6:31 a.m.57 views

RLSA-2022:5564 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: race condition in perfeventopen leads to privilege escalation CVE-2022-1729 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

7.4CVSS7.4AI score0.00317EPSS
SaveExploits0References2
Rows per page
Query Builder