Lucene search
+L

9393 matches found

BDU FSTEC
BDU FSTEC
•added 2026/07/13 12:00 a.m.•18 views

DBS Etherwatch DoS

The vulnerability of the DBS Etherwatch file-sharing server and the Wireshark traffic analyzer involves the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.8CVSS6.7AI score0.00171EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/07/13 12:00 a.m.•16 views

Vim read_compound() DoS

The vulnerability of the readcompound function in the Vim text editor is related to buffer overflows in dynamic memory when processing the spelllang parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.6CVSS6.7AI score0.00197EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/07/13 12:00 a.m.•18 views

GnuTLS DTLS DoS

The vulnerability of the DTLS protocol implementation of the GnuTLS cryptographic library is related to unpredictable behavior of functions due to inconsistencies in parameter values. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

7.8CVSS7.8AI score0.01129EPSS
SaveExploits0References37Affected Software10
BDU FSTEC
BDU FSTEC
•added 2026/07/13 12:00 a.m.•15 views

aiohttp Application add_domain function DoS

The vulnerability of the Application.adddomain function in the HTTP client of aiohttp is related to the use of duplicate headers due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...

5.3CVSS6.4AI score0.00393EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/07/13 12:00 a.m.•23 views

Linux driver cb7210 module Heap Buffer Overflow DoS

The vulnerability of the drivers/staging/gpib/cb7210/cb7210.c module in the Linux operating system’s kernel is related to incorrect initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.00236EPSS
SaveExploits0References8Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/07/13 12:00 a.m.•14 views

block blk-sysfs Queueattrstore DoS

The vulnerability of the queueattrstore function in the block/blk-sysfs.c module, which supports the block-level kernel in the Linux operating system, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause service failures...

5.5CVSS6.2AI score0.0015EPSS
SaveExploits0References7Affected Software2
Redos
Redos
•added 2026/07/13 12:00 a.m.•15 views

ROS-20260713-73-0020

The vulnerability in python-pillow is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

8.6CVSS7.2AI score0.00217EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/07/13 12:00 a.m.•15 views

Linux DRI virtio_gpu_get_caps_ioctl Buffer Overflow DoS

The vulnerability of the virtiogpugetcapsioctl function in the drivers/gpu/drm/virtio/virtgpuioctl.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the assignment of pointers L. Exploiting this vulnerability can allow an attacker to cause a...

5.5CVSS6.4AI score0.00252EPSS
SaveExploits0References14Affected Software3
CVE
CVE
•added 2026/07/12 12:06 p.m.•47 views

CVE-2026-56313

Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO prelink endpoint. Attackers with org.update_settings permission and an active SSO provider can call the prelink-users endpoint to permanently remove email-based authentication for any user matching the...

8.1CVSS5.9AI score0.00503EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/12 12:00 a.m.•11 views

CVE-2026-56313: Improper Authorization

Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO prelink endpoint that allows enterprise administrators to delete password identities of users in foreign organizations. Attackers with org.updatesettings permission and an active SSO provider can call...

8.1CVSS5.9AI score0.00503EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/11 3:44 a.m.•63 views

CVE-2026-6804 AI Chatbot & Workflow Automation by AIWU <= 1.4.12 - Missing Authorization to Unauthenticated Arbitrary Modification via 'publishTasks' and 'unpublishTasks' AJAX Actions

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.12. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attacke...

5.3CVSS0.00561EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/11 12:00 a.m.•8 views

CVE-2026-6804: Missing Authorization

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.12. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attacke...

5.3CVSS5.8AI score0.00561EPSS
SaveExploits0References2
Malwarebytes
Malwarebytes
•added 2026/07/10 11:02 a.m.•30 views

How mule betting scams recruit ordinary people

Mule betting or third-party betting account scams are a form of money mule scam where criminals recruit or coerce people into opening gambling accounts in their own name. The criminals then use those accounts to place bets to help launder money and obscure the source or ownership of funds. The UK...

6AI score
SaveExploits0
Snyk
Snyk
•added 2026/07/10 4:22 a.m.•17 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the rt.ReloadConfig function when processing the message.send argument. An attacker can cause unauthorized configuration reloads and potentially disrupt service integrity and availability by sending crafted...

5.5CVSS5.7AI score0.00401EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/10 4:22 a.m.•12 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the rt.ReloadConfig function when processing the message.send argument. An attacker can cause unauthorized configuration reloads and potentially disrupt service integrity and availability by sending crafted...

5.5CVSS5.7AI score0.00401EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/07/10 12:00 a.m.•17 views

aiohttp HTTP Client Resource Consumption DoS

The vulnerability of the aiohttp HTTP client is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

5.3CVSS6.4AI score0.0044EPSS
SaveExploits0References9Affected Software8
BDU FSTEC
BDU FSTEC
•added 2026/07/10 12:00 a.m.•17 views

GPAC multimedia platform Heap Buffer Overflow DoS

The vulnerability of the src/filters/dmxnhml.c component of the GPAC multimedia platform is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service interruptions or execute arbitrary code...

7.8CVSS7.6AI score0.00412EPSS
SaveExploits1References4Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/07/10 12:00 a.m.•26 views

Oracle Solaris File System Unauthorized Access

The vulnerability of the Oracle Solaris operating system’s file system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

7.1CVSS6.5AI score0.00156EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/07/10 12:00 a.m.•19 views

TraceQL DoS

The vulnerability of the TraceQL query language used in Grafana Tempo’s storage and analysis software for distributed trace data involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.8CVSS6.4AI score0.00411EPSS
SaveExploits0References3Affected Software2
Redos
Redos
•added 2026/07/10 12:00 a.m.•16 views

ROS-20260710-73-0024

The vulnerability of the ParseAddress function in the Go programming language is related to an uncontrolled resource consumption due to incorrect connection operations with strings. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.5CVSS6.9AI score0.00647EPSS
SaveExploits0
Rows per page
Query Builder